popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45346 2024-06-16 10:02 random.exe  

8f7aaf6053a152035540f30992647b10


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger exploit crash installed browsers check Exploit Browser crashed 		4.6 29 ZeroCERT

45347 2024-06-16 10:04 newbild.exe  

f9fc06f0cc64b6a700eda6fd6d816df3


PE File PE32 VirusTotal Malware Remote Code Execution 		2.4 M 42 ZeroCERT

45348 2024-06-16 10:04 ey.exe  

ceb1b42233ced601bf691ffa63a305a9


Generic Malware Malicious Packer Malicious Library UPX DllRegisterServer dll PE File PE32 MZP Format OS Processor Check JPEG Format DLL VirusTotal Malware AutoRuns suspicious privilege Creates executable files unpack itself AppData folder sandbox evasion Tofsee Windows Advertising Google ComputerName DNS DDNS crashed keylogger 		3 9 2 8.4 M 67 ZeroCERT

45349 2024-06-16 10:04 ticket_g.exe  

76a8b4d77a0aa32453fb51cab9bbf92e


Malicious Library PE File PE32 MZP Format VirusTotal Malware unpack itself Remote Code Execution DNS 		2 2.2 M 27 ZeroCERT

45350 2024-06-16 10:06 360setr.exe  

483fe860119307c2f9e2f7ed4caadc81


Backdoor Farfli Hide_EXE Generic Malware Malicious Library UPX PE File PE32 DLL OS Processor Check VirusTotal Malware AutoRuns Check memory Creates executable files Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW Windows DNS 		1 8.4 M 49 ZeroCERT

45351 2024-06-16 10:07 fud.exe  

041f9aff555780cf8970f612fb828b4d


XWorm WebCam Malicious Library .NET framework(MSIL) UPX AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		9.4 54 ZeroCERT

45352 2024-06-16 10:09 x86_0922_4.exe  

5f53734c5153ec3dd61e2a732a2ff03f


Generic Malware Malicious Packer Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns PDB suspicious privilege WriteConsoleW Windows Advertising Remote Code Execution Firmware DNS crashed 		1 7.2 M 37 ZeroCERT

45353 2024-06-16 10:09 lenin.exe  

93896624af562420c457d547b73dd197


Malicious Packer PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory buffers extracted unpack itself Windows utilities Collect installed applications suspicious process AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 9 13.8 M 41 ZeroCERT

45354 2024-06-16 10:11 ewwe.exe  

58f8e96f834d5d882046bd503ee83b18


Malicious Packer Malicious Library UPX PE64 PE File OS Processor Check VirusTotal Malware crashed 		2.0 M 48 ZeroCERT

45355 2024-06-16 10:13 lvse.exe  

bcb3fe24e81f8e6989bc8005838433a0


Generic Malware Malicious Library AntiDebug AntiVM PE File PE32 PE64 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows utilities suspicious process AppData folder Windows Advertising 		2 9.4 M 65 ZeroCERT

45356 2024-06-16 10:15 mz64.exe  

297b896dbf8d619c61fd947086fce6e8


Generic Malware Malicious Packer Malicious Library UPX PE64 PE File OS Processor Check VirusTotal Malware Check memory WriteConsoleW 		2.8 M 63 ZeroCERT

45357 2024-06-16 10:16 DhlServer.exe  

dcaab6548f0017f413d032fac6449fc1


Generic Malware Malicious Library PE File PE32 VirusTotal Malware AutoRuns Creates executable files unpack itself suspicious process Windows DNS 		1 3 1 5.8 M 64 ZeroCERT

45358 2024-06-16 10:18 %E9%98%B2%E5%8A%AB%E6%8C%811.0...  

7f0bf23db6496335d9adf01fb50ec091


Backdoor Farfli Hide_EXE Generic Malware Malicious Library UPX PE File PE32 DLL OS Processor Check AutoRuns Check memory Creates executable files Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW Windows DNS 		3 5.0 M ZeroCERT

45359 2024-06-16 10:18 random.exe  

0f2c5d3966f262c04af7eb8cbe26c78a


Amadey Gen1 RedLine stealer RedlineStealer Lumma Stealer Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) UPX Downloader Malicious Packer Antivirus .NET framework(MSIL) ScreenShot Anti_VM AntiDebug AntiVM PE File PE32 OS Processor Chec Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Cryptocurrency Miner Malware Microsoft AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder VMware anti-virtualization installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader CoinMiner 		10 17 17 2 20.0 M 41 ZeroCERT

45360 2024-06-16 10:19 163.exe  

8e4c0eeb469f011e6aea3dbd07106515


Generic Malware Malicious Library Downloader ASPack UPX Malicious Packer Anti_VM DllRegisterServer dll PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW installed browsers check Windows Browser Remote Code Execution 		4 1 6.4 M 65 ZeroCERT

keyword