popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46756 2024-08-07 09:51 excel.exe  

0f73677af37f11c406ca9f726653eb54


PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Checks debugger Creates executable files unpack itself Windows utilities suspicious process Windows Cryptographic key 		6.6 M 59 ZeroCERT

46757 2024-08-07 09:53 zoom.vbs  

23beb362ea6c6447b481f4b507fc4fe7

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		2 4 3 10.0 27 ZeroCERT

46758 2024-08-07 09:54 719.vbs  

bddc705622e0b2e5022ab7e66e2fd204

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		2 4 3 10.0 25 ZeroCERT

46759 2024-08-07 09:55 cred64.dll  

22b622506f13b2f13f4ef2db22d23a3f


Generic Malware Malicious Library UPX Antivirus PE File DLL PE64 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process suspicious TLD sandbox evasion installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 3 3 1 10.2 M 57 ZeroCERT

46760 2024-08-07 09:56 w79.vbs  

661e4447857ab3a35bd5d510c4b53657

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download unpack itself AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		2 4 3 10.0 M 28 ZeroCERT

46761 2024-08-07 09:57 setup.exe  

fc99ddf185aa553bf30c431cc897c903


Generic Malware Malicious Library UPX ftp PE File PE32 OS Processor Check VirusTotal Malware Telegram Code Injection unpack itself IP Check DNS 		1 4 4 5.2 M 33 ZeroCERT

46762 2024-08-07 09:58 clip64.dll  

40c8cf4849514e1d32f865bafe75f898


Amadey Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware Malicious Traffic Checks debugger unpack itself DNS 		1 2 3 1 3.0 M 56 ZeroCERT

46763 2024-08-07 10:00 cred.dll  

2fb39d6664f6b415124cf2368db92fb4


Generic Malware Malicious Library UPX Antivirus PE File DLL PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process sandbox evasion installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 3 1 8.2 M ZeroCERT

46764 2024-08-07 10:02 ds.exe  

3b6b710da92a115329d00c5e55ad7671


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 25 ZeroCERT

46765 2024-08-07 10:04 193.exe  

5a5ccdbe3cdd135a57f61138867932a8


Generic Malware UPX PE File PE32 VirusTotal Malware DNS 		1 1 4.0 M 59 ZeroCERT

46766 2024-08-07 10:04 amadey.exe  

107c3b33e05d1d569cccc2052e56055e


Amadey Generic Malware Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check DLL PE64 JPEG Format Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Software 		4 29 5 13.6 M 52 ZeroCERT

46767 2024-08-07 10:04 sahost.exe  

849c7ae770318ac09e0fde466e1becfe


Malicious Library .NET framework(MSIL) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		7.4 M 33 ZeroCERT

46768 2024-08-07 10:06 masdaaaewebbbMPDW-constraints....  

2bcdb70c9930b9ade4d2f993105816ca


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.6 M 3 ZeroCERT

46769 2024-08-07 10:07 jm.vbs  

1e4160cfab325ccbe906be8bfd94fb53

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download unpack itself AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		2 4 3 10.0 M 32 ZeroCERT

46770 2024-08-07 10:08 Eqmosyuwc.exe  

5bd96efdf03f3f0758f1822e678dacaa


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2.8 ZeroCERT

keyword