popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45916 2024-07-09 14:18 Update_old.js  

affe7c07da3776a191c69b73e50d491a


VBScript wscript.exe payload download Tofsee crashed Dropper 		2 2 10.0 guest

45917 2024-07-09 17:06 build1111.exe  

dea351e95b2d5b0a6b3911d531315550


Generic Malware Malicious Library PE File PE64 VirusTotal Malware Check memory unpack itself 		1.2 17 ZeroCERT

45918 2024-07-09 17:06 runerdata.exe  

99c919281e619f24edc578e427433f7b


Malicious Library Malicious Packer .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 38 ZeroCERT

45919 2024-07-09 17:08 trc.exe  

74758f61067ea9fa0e2a4593920ed0f2


Generic Malware Malicious Library Malicious Packer UPX Anti_VM PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.4 M 28 ZeroCERT

45920 2024-07-09 17:10 fromblueRmilxch.exe  

0234bff4bd4e6dd7a80d3fde4f12fc09


Malicious Library Malicious Packer .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 35 ZeroCERT

45921 2024-07-09 18:16 근로신청서 관련의 건.docx.lnk  

21d12dc7f08752293847af6ed19df0e3


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 8 ZeroCERT

45922 2024-07-09 18:21 소명자료 목록.hwp.lnk  

a330b834cc2ec19c3e151f07fb4b877c


Generic Malware Antivirus AntiDebug AntiVM HWP MSOffice File Lnk Format GIF Format VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 6.0 24 ZeroCERT

45923 2024-07-09 18:41 2aba0c4cfb95beba9ddb8208234f1b...  

432230af1d59dac7dfb47e0684807240


Escalate priviledges PWS KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself DNS 		3 4.2 5 ZeroCERT

45924 2024-07-09 18:47 DS_Store.exe  

14df06539b72837adb9f8d13cfcea6db


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware PDB Remote Code Execution 		0.8 7 ZeroCERT

45925 2024-07-09 18:49 DS_Store.exe  

14df06539b72837adb9f8d13cfcea6db


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware PDB Remote Code Execution 		0.8 7 ZeroCERT

45926 2024-07-09 21:31 https://l.facebook.com/l.php?u...  

2bec4686337f2e399b71386575535145


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		12 10 2 4.2 guest

45927 2024-07-09 21:37 https://www.facebook.com/38022...  

1248cb643e2592a6bcce60711dc10617


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format icon MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		10 8 2 4.2 guest

45928 2024-07-09 21:37 https://l.facebook.com/l.php?u...  

c896711e056cb6f0df71a7c8e0fac71c


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		13 10 2 4.8 guest

45929 2024-07-10 07:36 2.exe  

536b6b4464f2476d693267bd71d9a1ee


Lumma Stealer UPX PE File PE32 VirusTotal Malware 		1.2 52 ZeroCERT

45930 2024-07-10 07:38 200.exe  

74454c0916108ed9de037798dd9fb948


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.2 32 ZeroCERT

keyword