popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45826 2024-07-06 12:48 startupppp.bat  

f88fe8d8b25b85e6c7f7b31f71771193


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware Windows utilities WriteConsoleW Windows 		1.4 2 ZeroCERT

45827 2024-07-06 18:18 datingloverstartingAgain.vbs  

66decb1e47d3173c8046c1a921244190

VirusTotal Malware DNS 		1 1 2.0 7 ZeroCERT

45828 2024-07-06 18:20 mkl.js  

b0d0cfe2e3d3285272c07d5c32c96e44


AgentTesla Malicious Library Malicious Packer UPX PE File OS Memory Check .NET EXE PE32 OS Name Check OS Processor Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee Windows Gmail Browser Email ComputerName crashed keylogger 		2 2 9.6 14 ZeroCERT

45829 2024-07-06 18:21 inte.exe  

0da0d1efee859f1fe9cbd3bf5b428af6


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Malicious Traffic DNS 		1 1 1 1 2.6 M 58 ZeroCERT

45830 2024-07-06 18:22 univ.exe  

217b817f890ef7fc49dc9207d55d2a01


GCleaner Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Malicious Traffic human activity check DNS 		1 1 1 1 3.4 M 57 ZeroCERT

45831 2024-07-06 18:25 CryptoWall.exe  

919034c8efb9678f96b47a20fa6199f2


ScreenShot KeyLogger AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted IP Check DNS 		2 10 3 7.8 M 60 ZeroCERT

45832 2024-07-06 18:25 leva.exe  

de1f91ae5c55b1cbbc6d6561464d7d99


Gen1 EnigmaProtector Generic Malware Malicious Library UPX Malicious Packer AntiDebug AntiVM PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Code Injection Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		8 3 16 12.4 M 35 ZeroCERT

45833 2024-07-06 18:27 setup.exe  

6b189fc6ddde33cba5c63e1dfec82b2a


Malicious Library PE File PE32 VirusTotal Malware Checks debugger WMI Creates executable files RWX flags setting unpack itself Checks Bios anti-virtualization ComputerName DNS 		1 5.2 M 37 ZeroCERT

45834 2024-07-06 18:29 newbuild.exe  

9ab4de8b2f2b99f009d32aa790cd091b


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6 6.2 M 63 ZeroCERT

45835 2024-07-06 18:30 stealc_zov.exe  

253ccac8a47b80287f651987c0c779ea


Gen1 Generic Malware Malicious Library UPX Malicious Packer PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		8 1 16 8.4 M 65 ZeroCERT

45836 2024-07-06 18:31 RedLineStealer.exe  

a957dc16d684fbd7e12fc87e8ee12fea


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.4 M 62 ZeroCERT

45837 2024-07-06 18:33 CoronaVirus.exe  

055d1462f66a350d9886542d4d79bc2b


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself suspicious process sandbox evasion shadowcopy delete installed browsers check Ransomware Windows Browser ComputerName Remote Code Execution 		9.6 M 63 ZeroCERT

45838 2024-07-06 18:35 build.exe  

2dece3353cda5321fff7c92a697c37ee


Vidar Generic Malware Malicious Library Antivirus UPX AntiDebug AntiVM PE File PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		3 5 3 1 11.0 M 60 ZeroCERT

45839 2024-07-07 18:48 asdfg.exe  

a2a9c309c5300a53d2c2fc41b71b174b


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.6 M 55 ZeroCERT

45840 2024-07-07 18:48 PO%2012.04%20pdf.exe  

d90a72256615ac3ba74c924012fea42c


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File PE32 Device_File_Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		6.0 53 ZeroCERT

keyword