popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46246 2024-07-23 18:36 #1. 프로젝트 정보 업데이트 요청사항.xlsx.lnk...  

e3eeeebb117b7c3128d87b6e027bd85d


Lnk Format GIF Format 		11 ZeroCERT

46247 2024-07-24 07:22 server.exe  

fea9e6588163a319883a3b4d9b1f48fe


Hide_EXE Generic Malware Downloader Antivirus Create Service Socket DGA ScreenShot Escalate priviledges PWS Sniff Audio SMTP DNS Code injection Internet API KeyLogger Anti_VM AntiDebug AntiVM PE File .NET EXE PE32 Lnk Format GIF Format VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process AppData folder malicious URLs Windows ComputerName Cryptographic key crashed keylogger 		2 1 15.8 M 59 guest

46248 2024-07-24 07:33 JxTcJM84e3NbGP4mm.exe  

4faafbf754fc2dad8769ba54c564c22f


Generic Malware Malicious Library Antivirus PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 52 ZeroCERT

46249 2024-07-24 07:38 201.exe  

b42e6e906c622c0785c93e615ed2cc2b


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.2 37 ZeroCERT

46250 2024-07-24 07:38 winiti.exe  

1832ae26a5094d286983ffb8b36a31da


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 4 6 15.0 29 ZeroCERT

46251 2024-07-24 07:40 winiti.exe  

6351e73e0fe9bb4bc8f56647a0c21f11


Malicious Library .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware Telegram PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 6 9 12.6 M ZeroCERT

46252 2024-07-24 07:42 jrn10.exe  

675737d9b22bcfefe651c11bd47d404c


Malicious Library .NET framework(MSIL) UPX ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		6.8 M ZeroCERT

46253 2024-07-24 07:43 doc_00394039424.exe  

e34683e560b0c2a5cddcffe98956ea62


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library .NET framework(MSIL) Antivirus Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Internet API powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		1 3 4 13.2 ZeroCERT

46254 2024-07-24 07:44 JxTcJM84e3NbGP4.exe  

adbe420a49db30f75d4665ea0014af43


XWorm Generic Malware WebCam Malicious Library Antivirus AntiDebug AntiVM PE File .NET EXE PE32 suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key 		1 9.8 M ZeroCERT

46255 2024-07-24 07:46 winiti.exe  

33f3dc03864d8d5cce813683d49ad2dd


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 PDB Check memory Checks debugger unpack itself 		1.4 ZeroCERT

46256 2024-07-24 07:49 winiti.exe  

632bc57649205a43aab8ab7f6e3fb744


AgentTesla Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 5 14.6 ZeroCERT

46257 2024-07-24 07:51 rinqu.exe  

8e5286e3caa11c78e275892a38f2e772


Vidar Client SW User Data Stealer LokiBot ftp Client info stealer Malicious Library .NET framework(MSIL) UPX ASPack Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 16.0 M ZeroCERT

46258 2024-07-24 07:53 winiti.exe  

2d0799f49041670aafa005363a5577ab


Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 4 6 16.0 M ZeroCERT

46259 2024-07-24 09:10 mydatinglifeissoggod.vbs  

3d6214efa393e9c67ecfbd8ca4bda0a7


Generic Malware Antivirus PowerShell VirusTotal Malware VBScript powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key Dropper 		2 4 3 1 10.0 M 7 ZeroCERT

46260 2024-07-24 09:13 simplethingseverywherehappenin...  

adfee8b962087fe5108f615806ce6903


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		3 4 5 2 4.6 M 37 ZeroCERT

keyword