popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46351 2024-07-27 14:57 pi.exe  

1e8a2ed2e3f35620fb6b8c2a782a57f3


Generic Malware Downloader Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer UPX PE File PE32 Malware download VirusTotal Malware AutoRuns Malicious Traffic Checks debugger ICMP traffic Disables Windows Security Windows DNS 		5 23 2 5 9.2 M 65 ZeroCERT

46352 2024-07-27 14:59 creamthingstohappenedgetmeback...  

e03f3290788de4d7a103f16b780b3cce


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit DNS crashed 		1 5.2 M 37 ZeroCERT

46353 2024-07-27 14:59 createdgoodthingstogetmebackth...  

9f63ee5ef179cfcf56619e1c9d44447a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed 		1 1 4.6 M 38 ZeroCERT

46354 2024-07-27 15:02 funtogetbacktomeforgetbacktoge...  

f179217f7e89dea23f1a01c29fc61659


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS crashed 		1 1 4.6 M 38 ZeroCERT

46355 2024-07-27 15:02 iamtotalnewpersontogetmebackwi...  

25a6c39dbc117a7596c857dbec4e5d93


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed 		1 1 4.8 M 40 ZeroCERT

46356 2024-07-27 15:03 HNBC.txt.exe  

2b985c758a227407855e1d8e14f8863d


Browser Login Data Stealer Generic Malware Downloader Malicious Library Malicious Packer UPX ScreenShot AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer Remcos VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Windows Browser Email ComputerName DNS DDNS keylogger 		1 4 3 11.4 59 ZeroCERT

46357 2024-07-27 15:07 LMTS.txt.exe  

3ad8cb387874a15488508bf269fd2520


Browser Login Data Stealer Generic Malware Downloader Malicious Library Malicious Packer UPX Antivirus ScreenShot AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer Malware download Remcos VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS keylogger 		1 8 7 18.4 59 ZeroCERT

46358 2024-07-27 20:30 YesTraderRun.exe  

0c95469e9ee3bc62c0678d7ae0bed71c


Themida Packer Generic Malware Anti_VM PE File PE32 VirusTotal Malware 		1.4 2 guest

46359 2024-07-28 10:34 DecryptJohn.exe  

c1853d1c36dc461668c9af843d07cc58


Generic Malware Malicious Library Malicious Packer UPX PE File .NET EXE PE32 DLL OS Processor Check VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder crashed 		3.4 M 50 ZeroCERT

46360 2024-07-28 10:34 dccrypt.exe  

55398a65a9d1abb512e943a0d8901cb0


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE VirusTotal Malware PDB Code Injection Check memory Checks debugger Creates executable files unpack itself WriteConsoleW Remote Code Execution crashed 		6.4 M 57 ZeroCERT

46361 2024-07-28 10:36 build_2024-07-25_20-56.exe  

bea49eab907af8ad2cbea9bfb807aae2


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		1.8 M 53 ZeroCERT

46362 2024-07-28 10:36 Display1.exe  

88696cf17417a2339b63f9452404c839


Generic Malware task schedule Malicious Library WinRAR UPX AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder WriteConsoleW ComputerName Remote Code Execution crashed 		8.6 M 28 ZeroCERT

46363 2024-07-28 10:40 recreatednewthingswithentriene...  

0a9c028203a8416be8db7371550d0fb5


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself suspicious TLD Windows Exploit DNS crashed 		14 13 9 5.4 M 39 ZeroCERT

46364 2024-07-28 10:40 random.exe  

7e43d787c0813212855c05d5cc4b1752


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.0 M 38 ZeroCERT

46365 2024-07-28 10:42 winiti.exe  

1f5c95d40c06c01300f0a6592945a72d


Generic Malware Malicious Library UPX PWS AntiDebug AntiVM PE File .NET EXE PE32 DLL Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		12 12 4 10.0 M 53 ZeroCERT

keyword