popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46471 2024-07-31 10:19 memissedverynicesweetkissheren...  

cf3ae921fc075c967cac5a5e384849bc


MS_RTF_Obfuscation_Objects RTF File doc Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 1 3.6 M ZeroCERT

46472 2024-07-31 10:22 wearekingofthejunglewithentier...  

070b1946c9ab7ef8801ece97cc27eb0c


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 1 4.6 M 39 ZeroCERT

46473 2024-07-31 10:22 kjposter.exe  

456509bf6306fe9f2f34cc8177cad73d


Confuser .NET Malicious Library Malicious Packer .NET framework(MSIL) UPX PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Windows ComputerName Cryptographic key crashed 		4.4 M 34 ZeroCERT

46474 2024-07-31 10:22 taxpreperationz.exe  

20bbb7f851683930e080e888e1fd7c5f


Gen1 NSIS Generic Malware Malicious Library UPX Malicious Packer Antivirus Javascript_Blob Anti_VM PE File PE32 DLL OS Processor Check PE64 ftp icon PNG Format Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder AntiVM_Disk Ransom Message VM Disk Size Check Ransomware 		5.8 ZeroCERT

46475 2024-07-31 10:24 Archivejuudyyy.jpeg.vbs  

7f2edeb8382cb0397d03bf2b3b32e528


ActiveXObject VirusTotal Malware unpack itself crashed 		1.0 8 ZeroCERT

46476 2024-07-31 10:24 mywifeisbeautifull.vbs  

02b6b577cf925689c42545770b951ac6


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 7.2 M 11 ZeroCERT

46477 2024-07-31 10:24 Invoice-2024-07-29.url  

123301099bd2b21b2b13bddb06c940dc


AntiDebug AntiVM URL Format Code Injection exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 1 8 3.4 M ZeroCERT

46478 2024-07-31 10:26 iamworkingonentirethingstobeba...  

c1770981e03dda36b16f52acb050e99a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Exploit DNS crashed 		1 5.2 M 36 ZeroCERT

46479 2024-07-31 10:26 Archive.js  

d24a4b4852a8485e74220ee5979f2884


Generic Malware Antivirus ActiveXObject PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 7.0 4 ZeroCERT

46480 2024-07-31 10:26 au.js  

dbe4c84c471b795ec32210638cd177cd


Malicious Library Malicious Packer .NET framework(MSIL) UPX PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 7 9 11.6 16 ZeroCERT

46481 2024-07-31 10:34 iamworkingonentirethingstobeba...  

c1770981e03dda36b16f52acb050e99a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Exploit DNS crashed 		2 1 4.8 M 36 ZeroCERT

46482 2024-07-31 14:45 Ledger Backup Guide.pdf.lnk  

2f7d198bd913d4694467e2ded0e55ead


Generic Malware Antivirus Admin Tool (Sysinternals etc ...) UPX AntiDebug AntiVM Lnk Format GIF Format PowerShell PE File PE32 Malware download AsyncRAT NetWireRC Vulnerability VirusTotal Malware VBScript Cryptocurrency wallets Cryptocurrency powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Ransomware Interception Windows Exploit ComputerName Trojan DNS Cryptographic key 		4 8 19 19.4 11 ZeroCERT

46483 2024-07-31 14:53 3007f.hta  

d7690e8539ac10edbe4099d361fb7cb5


Generic Malware Antivirus Admin Tool (Sysinternals etc ...) UPX AntiDebug AntiVM PowerShell PE File PE32 Malware download Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		6 7 9 3 15.8 ZeroCERT

46484 2024-07-31 14:55 23.exe  

367009ea6fe948f4c0773f4cd1274a5f


Admin Tool (Sysinternals etc ...) UPX AntiDebug AntiVM PE File PE32 Malware download AsyncRAT NetWireRC VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI RWX flags setting unpack itself Ransomware Windows ComputerName DNS Cryptographic key 		2 3 5 1 12.4 M 30 ZeroCERT

46485 2024-07-31 21:37 dssdj.exe  

b78013e1727d77333e2780e95d064b4b


Malicious Library UPX PE File PE32 MZP Format DLL DllRegisterServer dll VirusTotal Malware Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check crashed 		3.0 1 guest

keyword