popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46546 2024-08-02 10:30 payload_1_3.ps1  

be3d9786fc25e399ba1785508fb8c441


Generic Malware Antivirus PE File DLL PE32 .NET DLL VirusTotal Malware Check memory Creates executable files unpack itself Windows utilities AppData folder Windows ComputerName DNS Cryptographic key 		1 5.4 6 ZeroCERT

46547 2024-08-02 17:21 %E5%AE%89%E8%A3%85%E5%AF%9F%E7...  

f9589d32c6fcbb019e3a95c4be0f4e92


Generic Malware Malicious Library Antivirus MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 4.4 34 ZeroCERT

46548 2024-08-02 17:24 build_2024-07-24_23-16.exe  

72bcb9136fde10fdddfaa593f2cdfe42


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Windows Remote Code Execution 		3.4 M 56 ZeroCERT

46549 2024-08-02 17:25 guardservice.exe  

d0e4beee4073fbe4ffeaf89c052eab2b


Emotet Generic Malware Malicious Library Malicious Packer UPX ASPack ftp PE File PE32 OS Processor Check DllRegisterServer dll Lnk Format GIF Format VirusTotal Malware AutoRuns Check memory Creates shortcut Creates executable files AppData folder sandbox evasion Tofsee Windows ComputerName DNS 		1 2 3 5.6 39 ZeroCERT

46550 2024-08-02 17:27 66a3594e79991.msi  

f3baa740b63233597af9102a1063a17f


Generic Malware Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2.4 M 15 ZeroCERT

46551 2024-08-04 13:22 a.exe  

10193f6590742a4ddd1e5b4ce8743ab4


UPX PE File PE64 VirusTotal Malware 		2.4 M 31 ZeroCERT

46552 2024-08-04 13:22 eee.exe  

542b77100b79dda183359bfa3890e4bd


UPX PE File PE64 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 1 3.8 M 20 ZeroCERT

46553 2024-08-04 13:24 %E6%88%91%E7%9A%84%E4%B8%96%E7...  

dc481056e65328f44e332a878d9e2064


UPX PE File PE64 VirusTotal Malware 		2.4 M 31 ZeroCERT

46554 2024-08-04 13:24 %E6%A4%8D%E7%89%A9%E5%A4%A7%E6...  

1ee9c13a407d148b737ec40fbc48b4d3


UPX PE File PE32 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		2 4.2 M 33 ZeroCERT

46555 2024-08-04 13:26 Invoice.exe  

922a78d9c8741836247c4c417105713c


UPX PE File PE64 VirusTotal Malware 		2.6 M 51 ZeroCERT

46556 2024-08-04 13:26 mimilib.dll  

80b4e71fcf1d3e41c95e608ae8258dcd


Malicious Packer PE File DLL PE64 VirusTotal Malware Checks debugger DNS crashed 		1 2.2 M 54 ZeroCERT

46557 2024-08-04 13:28 setup.exe  

919cbed764792c6151de3dd43459d649


Generic Malware Malicious Packer UPX PE File PE64 VirusTotal Malware Malicious Traffic RWX flags setting unpack itself ComputerName DNS 		1 1 3.6 M 21 ZeroCERT

46558 2024-08-04 13:28 Client-built.exe  

31f02498a247da63ebb0cac0a727d73e


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 60 ZeroCERT

46559 2024-08-04 13:30 wow.exe  

a09ccb37bd0798093033ba9a132f640f


Malicious Library ASPack PE File PE32 CAB MZP Format DLL VirusTotal Malware Check memory Checks debugger unpack itself AppData folder 		2.4 12 ZeroCERT

46560 2024-08-04 13:30 1.exe  

0b3e8cba9ade0b3aa878518d0152fa05


Generic Malware Malicious Library Anti_VM PE File PE32 VirusTotal Malware Checks debugger RWX flags setting unpack itself Detects VMWare VMware DNS crashed 		1 6.8 M 57 ZeroCERT

keyword