popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45601 2024-06-27 04:33 https://t.co/J5c3B3lHDS  

a447b2274aa6e2ebdb080e3def9263db


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.2 guest

45602 2024-06-27 10:05 b.j.c.c.cc.doc  

809e5331e9ead88825e560d3077cb6da


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 5 3 5.0 M 32 ZeroCERT

45603 2024-06-27 10:05 ae.e.e.e.eee.doc  

681f318b1d7a8a9505e6b3ec626a8988


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware powershell Malicious Traffic buffers extracted exploit crash unpack itself Exploit Java DNS crashed 		3 4 4 5.0 M 35 ZeroCERT

45604 2024-06-27 10:07 w624.vbs  

c2ab43cad589673051ce723bc3b37392

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download unpack itself AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		2 4 2 10.0 27 ZeroCERT

45605 2024-06-27 10:09 sc.exe  

e86471da9e0244d1d5e29b15fc9feb80


Generic Malware Malicious Library Downloader Antivirus UPX PE File PE64 OS Processor Check Browser Info Stealer VirusTotal Malware AutoRuns PDB Windows Browser 		2.6 M 60 ZeroCERT

45606 2024-06-27 10:09 kn.n.n.n.nnnn.doC  

2af6dfccbd42b4b421436d545211a3be


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted exploit crash unpack itself Exploit DNS crashed 		2 5.6 37 ZeroCERT

45607 2024-06-27 10:11 vi.exe  

baa9e1a92bab85279dca0aed641f1fa9


Malicious Library Antivirus UPX PE File PE32 OS Processor Check VirusTotal Malware Malicious Traffic Tofsee crashed 		1 4 1 3.4 M 52 ZeroCERT

45608 2024-06-27 10:12 Software.exe  

ae2b1b79c7579bb64b1640303f88c05f


Themida Packer Malicious Library UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Detects VMWare AppData folder VMware anti-virtualization Windows Firmware Cryptographic key crashed 		12.0 59 ZeroCERT

45609 2024-06-27 10:14 ma.exe  

a3fb2b623f4490ae1979fea68cfe36d6


Downloader Malicious Library Malicious Packer UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE64 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates executable files RWX flags setting unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Remote Code Execution crashed 		9.4 61 ZeroCERT

45610 2024-06-27 10:16 a.p.l.n.doc  

6e11c40fcc227fab4b32f8c3b275b57c


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 3 3 5.0 M 38 ZeroCERT

45611 2024-06-27 10:16 payload.bin  

48cc44c908f2b564daf679a93a7259b6


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.4 M 39 ZeroCERT

45612 2024-06-27 10:18 cp.exe  

97256cf11c9109c24fde65395fef1306


Generic Malware Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows 		3.4 M 59 ZeroCERT

45613 2024-06-27 10:20 O3B6wY7ZkFhh.exe  

9b297a1485665aef1a926f7cd322c932


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.4 M 27 ZeroCERT

45614 2024-06-27 10:22 3.exe  

84c6c6c2620a690c0cc77fc438396837


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware 		1.2 M 26 ZeroCERT

45615 2024-06-27 10:24 ama.exe  

04055601abbd16ec6cc9e02450c19381


Generic Malware Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows 		3.4 M 63 ZeroCERT

keyword