popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45616 2024-06-27 10:27 hv.exe  

6a1db4f73db4ed058c8cd7e04dfa7cc3


Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) .NET framework(MSIL) UPX PWS AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check VirusTotal Malware Buffer PE PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 1 12.6 M 54 ZeroCERT

45617 2024-06-27 13:25 Result_2024-0617.pdf.jse  

20e2de2d794dfff774b71b6dd2294a96


Client SW User Data Stealer browser info stealer Generic Malware Suspicious_Script_Bin Hide_EXE Google Chrome User Data Downloader Antivirus Malicious Library Malicious Packer UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal cr Browser Info Stealer VirusTotal Malware United States powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Windows Exploit Browser ComputerName Cryptographic key crashed 		1 1 1 13.0 24 ZeroCERT

45618 2024-06-27 17:12 build2.exe  

335a64e110185d35bcfbc3ef86a382e9


Client SW User Data Stealer LokiBot ftp Client info stealer Generic Malware Malicious Library UPX Http API PWS Code injection AntiDebug AntiVM PE File PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 15.8 M 59 ZeroCERT

45619 2024-06-27 17:17 부가가치세 수정신고 안내(부가가치세사무처리규정).hwp...  

6eee6fa92a270b1f32390eec50512eea


Generic Malware Malicious Library Antivirus HWP PS PostScript AntiDebug AntiVM GIF Format Lnk Format PE File PE32 CAB JPEG Format MSOffice File Malware download VirusTotal Malware Campaign powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Konni Windows ComputerName Cryptographic key 		2 2 1 1 9.0 17 ZeroCERT

45620 2024-06-27 18:24 system.exe  

e920056a531d4a0635ba526fabeda4ce


Gen1 Generic Malware Malicious Library ASPack UPX Malicious Packer Anti_VM PE File PE64 OS Processor Check DLL ZIP Format VirusTotal Malware Check memory Creates executable files crashed 		2.4 39 ZeroCERT

45621 2024-06-28 12:42 mimikatz.exe  

e930b05efe23891d19bc354a4209be3e


Generic Malware Malicious Packer UPX PE File PE64 VirusTotal Malware Check memory WriteConsoleW 		1.6 65 ZeroCERT

45622 2024-06-28 12:44 chisel.exe  

6ddee3e7fa0969931f9ec465e9c8965a


Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		1.6 52 ZeroCERT

45623 2024-06-28 12:45 123.exe  

cd581d68ed550455444ee6e099c44266


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check PNG Format MSOffice File JPEG Format Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 10 7 1 12.4 M 57 ZeroCERT

45624 2024-06-28 12:46 %E5%9B%BD%E5%BA%86%E5%BB%B6%E8...  

d0e72468c01cf13b48c0a5ee2a310cb2


Malicious Library PE File PE64 VirusTotal Malware RWX flags setting DNS crashed 		1 4.0 M 63 ZeroCERT

45625 2024-06-28 12:47 intalls555.exe  

7e30a1a92f86e8e0a25154b1521d0588


Antivirus UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Telegram suspicious privilege MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check Tofsee Windows ComputerName DNS keylogger 		2 4 4.8 M 59 ZeroCERT

45626 2024-06-28 12:48 alphazxv.scr  

e4979c53302e30f656edf76043b5944a


LokiBot Generic Malware Malicious Library .NET framework(MSIL) Antivirus Socket PWS DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 8 16.0 M 49 ZeroCERT

45627 2024-06-28 12:50 alex5555555.exe  

a80a86c701801cbd77cf7406be6d11f0


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.4 M 56 ZeroCERT

45628 2024-06-28 12:50 au.u.u.u.uuuu.doc  

d268f6028d5fcdb70bf64bf7419852a4


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed 		1 2 6.0 M 38 ZeroCERT

45629 2024-06-28 12:53 sw.w.w.w.www.doc  

80e1ba7b421fd01f5319de00cf5420f7


MS_RTF_Obfuscation_Objects RTF File doc Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		3 5 2 4.0 M ZeroCERT

45630 2024-06-28 12:53 random.exe  

97ddaf205149ee9833a9b79cbfa33e68


Gen1 EnigmaProtector Generic Malware Malicious Library UPX Malicious Packer PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download Vidar VirusTotal Malware c&c Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName DNS crashed plugin 		8 1 15 1 8.2 M 33 ZeroCERT

keyword