popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46366 2024-07-28 10:53 random.exe  

8c0430ee2841a6554d709869a81a375b


RedLine stealer RedlineStealer SystemBC Gen1 Themida Packer Generic Malware Downloader UPX Malicious Library .NET framework(MSIL) Malicious Packer Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audi Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware Microsoft AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare AppData folder VMware anti-virtualization installed browsers check Tofsee Ransomware Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		8 9 16 17.8 M 47 ZeroCERT

46367 2024-07-28 14:18 Bin_HookShark64_2011-12-31_19....  

4f19a7e5f8225992821041d0109ffc8c


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.2 1 guest

46368 2024-07-28 14:48 Bin_HookShark64_2011-12-31_19....  

4f19a7e5f8225992821041d0109ffc8c


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.8 1 guest

46369 2024-07-29 13:22 winiti.exe  

e8b4997fd647c6236e8d6a5460724cee


Formbook North Korea Generic Malware Malicious Library .NET framework(MSIL) Antivirus UPX PWS AntiDebug AntiVM PE File .NET EXE PE32 DLL Browser Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder suspicious TLD WriteConsoleW Windows Browser ComputerName DNS Cryptographic key 		13 13 2 4 13.4 M 55 ZeroCERT

46370 2024-07-29 13:23 cp.exe  

aed4c0c1a8eddddad6e556442795f474


Malicious Library Antivirus UPX PE File .NET EXE PE32 OS Processor Check Lnk Format GIF Format VirusTotal Malware Telegram AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check Tofsee Windows ComputerName DNS keylogger 		2 4 6.6 51 ZeroCERT

46371 2024-07-29 13:29 ef.exe  

94b423329b05b002507c36396870bb25


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware DNS 		2 2.2 M 64 ZeroCERT

46372 2024-07-29 13:32 cred.dll  

d696e4ee5dac5d3e4b5073359224fcdc


Generic Malware Malicious Library UPX Antivirus PE File DLL PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process sandbox evasion installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 3 1 10.0 M 54 ZeroCERT

46373 2024-07-29 13:34 win10.exe  

7fa42ffc17069589fd85c3ea2b46a57c


Generic Malware Malicious Library Malicious Packer UPX DllRegisterServer dll PE File PE32 MZP Format OS Processor Check DLL JPEG Format VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself AppData folder Tofsee Windows Advertising Google ComputerName DNS DDNS crashed keylogger 		3 10 2 9.2 M 68 ZeroCERT

46374 2024-07-29 13:36 beyondtransfer.exe  

99f875d6395b7697228e9cbc8533fdc7


.NET framework(MSIL) PE File .NET EXE PE32 Malware download VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows ComputerName DNS 		1 1 4 5.6 M 58 ZeroCERT

46375 2024-07-29 13:38 3-1.exe  

3482f7d0b7c1a3eeca3874bc9a1397ce


Generic Malware Malicious Library ASPack UPX Malicious Packer Socket ScreenShot Escalate priviledges PWS SMTP SSL DNS Dynamic Dns Internet API persistence KeyLogger AntiDebug AntiVM DllRegisterServer dll PE File PE32 MZP Format OS Processor Check JPEG For VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities AppData folder malicious URLs sandbox evasion Tofsee Windows Browser Advertising Google ComputerName DNS DDNS crashed keylogger 		3 13 3 16.6 M 69 ZeroCERT

46376 2024-07-29 13:38 sa.exe  

b78d38577f3a1ba9178e7fab5e5bddf6


Antivirus UPX PE File .NET EXE PE32 OS Processor Check Lnk Format GIF Format VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName DNS keylogger 		2 6.8 M 59 ZeroCERT

46377 2024-07-29 13:39 wd.exe  

d65f5982c1f1f2967fdd91b7f21a5696


Generic Malware Malicious Library Malicious Packer ASPack UPX DllRegisterServer dll PE File PE32 MZP Format OS Processor Check DLL JPEG Format VirusTotal Malware AutoRuns suspicious privilege Creates executable files unpack itself AppData folder sandbox evasion Tofsee Windows Advertising Google ComputerName DNS DDNS crashed keylogger 		3 9 2 8.2 M 70 ZeroCERT

46378 2024-07-29 13:42 random.exe  

a45cd34dab56ce2f61232c79a750374d


RedLine stealer Generic Malware EnigmaProtector UPX Malicious Library Code injection Anti_VM AntiDebug AntiVM PE File PE32 OS Processor Check Malware download Amadey VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Checks Bios Detects VMWare AppData folder malicious URLs VMware anti-virtualization human activity check installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName DNS crashed 		3 4 8 18.6 M 40 ZeroCERT

46379 2024-07-29 13:42 clip64.dll  

7d257e3bb8441810561e09092162df73


Amadey Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware Malicious Traffic Checks debugger unpack itself DNS 		1 1 1 3.6 M 57 ZeroCERT

46380 2024-07-29 13:45 main.exe  

e3e1f7fa42dd68f410bb885f0aefe5e3


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 64 ZeroCERT

keyword