popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46321 2024-07-26 12:07 winiti.exe  

076d40b4c480dbd3a0e84260aab18cff


Generic Malware Malicious Library .NET framework(MSIL) UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL FormBook Browser Info Stealer Malware download VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		13 11 3 11.8 M 29 ZeroCERT

46322 2024-07-26 12:08 simplethingstobefranksheisvery...  

13d8c6fac85c9bc52cdd1b3f03acdf2c


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		15 14 8 5.0 M 35 ZeroCERT

46323 2024-07-26 12:09 peinf.exe  

eed7347593de2141727d3960041d8c8e


UPX PE File PE32 VirusTotal Malware DNS 		1 1.8 M 54 ZeroCERT

46324 2024-07-26 18:28 멀티캠퍼스 강연의뢰서_ 김병로 교수님 .docx.lnk...  

16074a3f76b7860a180e0ec54dd19ed6


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.6 32 ZeroCERT

46325 2024-07-26 18:31 ????impactfulbrands.co.uk_____...  

eb39f61659de025b97dc88f3c6eea279


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PowerShell ftp powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 8 4 7.6 ZeroCERT

46326 2024-07-26 18:39 somethinggreatwithmeentiretime...  

02e73ef6a6bde5caa7628ee916111f60


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself IP Check Tofsee Windows Exploit DNS crashed 		2 5 10 5.6 M 38 ZeroCERT

46327 2024-07-26 18:39 c.cmd  

948fdedc86c635c28b83bcd72f3557bd


Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.0 M ZeroCERT

46328 2024-07-26 18:41 jiopdssa.lnk  

370e93fbd938d0a6a8bae14c7b6a32d6


Generic Malware Antivirus Lnk Format GIF Format Creates shortcut unpack itself WriteConsoleW 		1 1.0 ZeroCERT

46329 2024-07-26 18:41 test2.jpg.exe  

ed6763398d7969ed28874c431402ee31


UPX PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.0 M 39 ZeroCERT

46330 2024-07-26 18:42 csrss.exe  

4fb3e6e7b8f9c12cd2d5e161f7b94760


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Google Chrome User Data Downloader Malicious Library Malicious Packer Antivirus UPX Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Internet API KeyLogger AntiDe Remcos VirusTotal Malware PDB Code Injection Malicious Traffic Check memory buffers extracted Remote Code Execution 		1 4 1 6.2 M 19 ZeroCERT

46331 2024-07-26 18:43 E_Sales_Doc43032234647380921_p...  

0a8c019dde3aafa90a3cd96efd391df8


Generic Malware Lnk Format GIF Format Creates shortcut unpack itself WriteConsoleW 		1 1.0 ZeroCERT

46332 2024-07-26 18:44 5346347634735.exe  

eff57bbdb0bd6825a3a3476e2fcc86be


Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 63 ZeroCERT

46333 2024-07-26 18:46 winiti.exe  

3d33cbde84d0a1197ec0d459d634473e


North Korea Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 3.0 M 41 ZeroCERT

46334 2024-07-26 18:46 cliente.exe  

3ef97e69a4c36ab5dc588a8aca155241


UPX PE File PE32 MZP Format OS Processor Check VirusTotal Malware crashed 		1.4 19 ZeroCERT

46335 2024-07-26 18:51 Proxy.exe  

979c9b19507478fe8f08d537ec70538b


Gen1 Generic Malware Malicious Library ASPack UPX Malicious Packer Anti_VM PE File PE64 OS Processor Check DLL ZIP Format VirusTotal Malware Check memory Creates executable files 		1.6 16 ZeroCERT

keyword