popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45931 2024-07-10 07:41 1.exe  

21cccf69e6aac10cae5b938d7b6c5fd4


Lumma Stealer UPX PE File PE32 VirusTotal Malware 		1.2 51 ZeroCERT

45932 2024-07-10 07:46 wev233v22.exe  

f7f9d3c98351d9be736e7aafb3563561


Gen1 Generic Malware Malicious Library UPX Antivirus Malicious Packer Anti_VM PE File PE64 DLL OS Processor Check ftp wget VirusTotal Malware Check memory Creates executable files unpack itself 		3.2 M 50 ZeroCERT

45933 2024-07-10 09:52 Update.js  

94a69d2789ce8db937bd23160c7cf57b

VBScript wscript.exe payload download Tofsee crashed Dropper 		1 2 2 10.0 guest

45934 2024-07-10 09:52 Update2.js  

1d07102e4ad699b952201104aca88770

VBScript wscript.exe payload download unpack itself Tofsee crashed Dropper 		1 2 2 10.0 guest

45935 2024-07-10 13:39 sostener.vbs  

af7ba7e4a9c914e8497936eb7b6ae725


Generic Malware Antivirus PowerShell VBScript powershell suspicious privilege Check memory Checks debugger wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key Dropper 		2 4 1 10.0 ZeroCERT

45936 2024-07-10 13:42 rustdesk.exe  

05d5f32d7a756924b7480ea0e3a36152


Generic Malware Malicious Library WinRAR UPX PE File PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Check memory Checks debugger Creates executable files sandbox evasion WriteConsoleW Windows Remote Code Execution 		5.2 M 22 ZeroCERT

45937 2024-07-10 13:43 mg.vbs  

8df76af54c38d5d4c2cd9f6d18eedf92


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 3 8.2 19 ZeroCERT

45938 2024-07-10 13:45 wh.vbs  

23454878fb50859c4849ac2b6e256789


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 3 8.4 22 ZeroCERT

45939 2024-07-10 16:10 Plugin_0703.exe.bak  

7fb098ac9cc8d730ac0ea7111805a553


Emotet Gen1 Generic Malware Malicious Library UPX Antivirus PE File PE32 CAB OS Processor Check DLL Lnk Format GIF Format ZIP Format AutoRuns Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Auto service AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check Windows Browser ComputerName Remote Code Execution 		7.6 guest

45940 2024-07-10 22:42 4b98d2919533ab614a7571aa0ef7c8...  

ad27be427dd7f922143e57fd1fa64f98


Browser Login Data Stealer Generic Malware Downloader Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check JPEG Format VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself suspicious process AppData folder Windows DNS keylogger 		1 9.2 29 guest

45941 2024-07-10 22:48 4b98d2919533ab614a7571aa0ef7c8...  

ad27be427dd7f922143e57fd1fa64f98


Browser Login Data Stealer Generic Malware Downloader Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check JPEG Format VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself suspicious process AppData folder Windows DNS keylogger 		1 9.8 29 guest

45942 2024-07-11 09:17 ghj.ghj.ghj.ghj.doc  

d55328b7b87c986b84e60450453840c1


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		3.2 34 ZeroCERT

45943 2024-07-11 09:18 gh.gh.gh.ghghghgh.doc  

feb6e59fff619a84e6e391a4c95a6650


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		3 4 3 4.8 M 40 ZeroCERT

45944 2024-07-11 09:21 a.exe  

56fae07d0d9ee560ef2fb4c536868b11


Malicious Library .NET framework(MSIL) DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		3 2 13.4 M 42 ZeroCERT

45945 2024-07-11 09:22 3.exe  

293460728c83e7be2fccc67283815c03


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.4 M 55 ZeroCERT

keyword