popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46561 2024-08-04 13:33 mimilib.dll  

ddbd4a6269c999e0e32a2b523495ca39


Generic Malware Malicious Library Malicious Packer UPX PE File DLL PE64 OS Processor Check VirusTotal Malware Checks debugger unpack itself crashed 		2.0 M 50 ZeroCERT

46562 2024-08-04 13:33 wereallyneedthisgirlbacktomypl...  

0a052f8d7d1dd625c750fe579d2c610c


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 1 4.6 M 34 ZeroCERT

46563 2024-08-04 13:33 .lnk  

ac9f282a9457797265cb5baf1dfafd54


Generic Malware UPX Antivirus AntiDebug AntiVM Lnk Format GIF Format PE File PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process AppData folder Interception Windows ComputerName DNS Cryptographic key 		1 1 3 8.8 M 24 ZeroCERT

46564 2024-08-04 13:35 mimikatz.exe  

640ff220dc517b6fda38e45fb575d47e


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware Check memory WriteConsoleW 		1.6 M 58 ZeroCERT

46565 2024-08-04 13:35 conhost.exe  

f8c2769b1490e6eabeb8dd5faa8e6e70


Gen1 Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		1.2 M 28 ZeroCERT

46566 2024-08-04 13:36 DR_Mod_200_2023.PDF.lnk  

0d6f8a03885e85f384584cb2416f859e


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Interception Windows ComputerName Cryptographic key 		1 1 7.2 34 ZeroCERT

46567 2024-08-04 13:37 mimispool.dll  

7185df3dbaa4049c26fe2d6962528577


Generic Malware Malicious Library UPX PE File DLL PE64 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.2 M 44 ZeroCERT

46568 2024-08-04 13:37 fremoney.pdf.lnk  

815e6eb6a474f4fcde376762c0e69c37


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 4.2 11 ZeroCERT

46569 2024-08-04 13:39 win.exe  

67b035c3aac011e498d0e6685fde0c16


UPX PE File PE64 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 4.2 M 42 ZeroCERT

46570 2024-08-04 13:41 JX2goame.exe  

288f1d023c0446d190a28e5f1899667c


EnigmaProtector UPX PE File PE32 VirusTotal Malware unpack itself Windows ComputerName crashed 		4.2 M 42 ZeroCERT

46571 2024-08-04 13:42 jf.exe  

d161e13cf0731d0b55ad38d6a38cdc21


CoinMiner Generic Malware Downloader UPX Malicious Library Confuser .NET Malicious Packer Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence F VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW IP Check Tofsee Interception Windows ComputerName Amazon Alibaba DNS 		4 150 5 15.4 M 47 ZeroCERT

46572 2024-08-04 13:43 uh.ee.uh.ee.uhuheee.doc  

5b88a1a2c13384068ece808b50699d86


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 2 1 6.0 M 38 ZeroCERT

46573 2024-08-04 13:46 china.exe  

a95e09168ff4b517c1ffa385206543b5


Malicious Library ASPack PE File PE32 CAB MZP Format DLL VirusTotal Malware Check memory Checks debugger unpack itself AppData folder 		2.4 M 13 ZeroCERT

46574 2024-08-04 13:48 ss.exe  

61584ce40b3b4c6f5b9ac4fb4f8f0ec9


Malicious Packer UPX PE File PE32 VirusTotal Malware unpack itself DNS 		1 3.6 M 61 ZeroCERT

46575 2024-08-04 13:50 select.exe  

d0e834aed727fe49a51b071c680a282c


Downloader PE File PE32 MZP Format VirusTotal Malware AutoRuns Check memory Windows Trojan 		4.2 M 70 ZeroCERT

keyword