popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46666 2024-08-05 11:14 killer.exe  

814b21e6d086af54d0f76290622ad1db


UPX PE File PE64 VirusTotal Malware Check memory Checks debugger Creates executable files Windows utilities WriteConsoleW Windows 		5.0 M 52 ZeroCERT

46667 2024-08-05 11:16 xmrig.exe  

e2fe87cc2c7dab8ca6516620dccd1381


XMRig Miner Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware unpack itself ComputerName 		1.8 M 61 ZeroCERT

46668 2024-08-05 11:18 Apex.exe  

017933f498a5e5fec5429ac2a1dc3b4a


PE File PE32 VirusTotal Malware unpack itself DNS crashed 		1 1 3.4 M 54 ZeroCERT

46669 2024-08-05 11:21 kill.exe  

da72c93960a58f7fc95220cd8428b548


UPX PE File PE64 VirusTotal Malware Check memory Checks debugger Creates executable files Windows utilities WriteConsoleW Windows 		5.0 M 48 ZeroCERT

46670 2024-08-05 11:26 x64.exe  

e4b9f59c60edde996ac3c2d2b133dbf7


Emotet Swrort Generic Malware Armageddon APT [C] All Process Malicious Library UPX Malicious Packer Antivirus Anti_VM PE File PE32 OS Processor Check DLL PE64 ftp MZP Format VirusTotal Malware PDB Creates executable files AppData folder Remote Code Execution 		3.0 M 56 ZeroCERT

46671 2024-08-05 13:56 Apex.exe  

017933f498a5e5fec5429ac2a1dc3b4a


UPX PE File PE32 VirusTotal Malware unpack itself DNS crashed 		1 1 1 3.4 M 54 r0d

46672 2024-08-05 14:01 SS.exe  

1f0754128f1fd32781886c3d9e7dc138


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows utilities WriteConsoleW Windows crashed 		5.0 M 50 r0d

46673 2024-08-05 14:04 Na.exe  

e91d7d92b5c5ab6d2c6ee2da175bb119


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows utilities WriteConsoleW Windows crashed 		5.0 M 52 r0d

46674 2024-08-05 14:30 민혜지2.jse  

6fba482cb866a3c51dc9063527886f5d


Generic Malware Hide_EXE Antivirus Malicious Library VMProtect Anti_VM JPEG Format PE File PE64 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 2 10.2 2 ZeroCERT

46675 2024-08-05 14:47 wanmgr.exe  

27aa8ad8930fa0d076510cfb6573ce74


Malicious Library DNS AntiDebug AntiVM PE File .NET EXE PE32 Malware download Nanocore Cobalt Strike NetWireRC VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process human activity check Windows RAT ComputerName DNS DDNS 		2 5 13.0 56 ZeroCERT

46676 2024-08-05 15:06 Update.js  

965ef5d776d9b91d2743a44b4093298a

VBScript wscript.exe payload download Tofsee Dropper 		1 2 2 10.0 guest

46677 2024-08-05 15:24 archive.7z  

662ee89f76cfb8a8bddc6894b08203a6


Amadey Stealc Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Amadey Vidar Cryptocurrency Miner Malware c&c Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check Tofsee Stealc Stealer Windows Discord Browser RisePro DNS plugin CoinMiner 		28 81 44 3 5.0 M ZeroCERT

46678 2024-08-05 15:39 66af45d13a3cb_xincz.exe#xin  

50d48645ac2526fbc7f99c5d7fb9eb42


Generic Malware Malicious Library Malicious Packer UPX DllRegisterServer dll PE File PE64 OS Processor Check VirusTotal Malware 		0.4 8 ZeroCERT

46679 2024-08-05 15:39 setup.exe  

91debd6b56717f90a922f0ea33155e68


Generic Malware Malicious Library Antivirus AntiDebug AntiVM PE File PE32 PowerShell powershell suspicious privilege Code Injection Check memory Checks debugger WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios suspicious process WriteConsoleW anti-virtualization Windows ComputerName Cryptographic key 		10.4 ZeroCERT

46680 2024-08-05 15:41 crt.exe  

f0958ee9db38d69ba0c9757926f0b895


Emotet Gen1 Malicious Library UPX PE File PE32 MZP Format PE64 DLL DllRegisterServer dll OS Processor Check Check memory Checks debugger Creates executable files unpack itself AppData folder 		1.8 ZeroCERT

keyword