popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46831 2024-08-09 07:53 buildz.exe  

b7cb7f2b5cd9bd047710650295dc88f7


Suspicious_Script_Bin Malicious Library UPX Socket DGA Http API ScreenShot PWS DNS Internet API AntiDebug AntiVM PE File PE32 OS Processor Check Malware download Malware Microsoft AutoRuns Code Injection malicious URLs Tofsee Windows ComputerName DNS 		2 4 6 1 4.8 M ZeroCERT

46832 2024-08-09 07:54 DivxBra.exe  

4ee6fb632595268ef97aacf18a0bffb8


Suspicious_Script_Bin Generic Malware Downloader Malicious Library UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P An suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Ransomware Windows ComputerName 		7.0 M ZeroCERT

46833 2024-08-09 07:56 bsso_launcher_v1.exe  

6a60f6fbd451bfb11d0c943706ceda0a


Malicious Library UPX PE File PE64 ftp OS Processor Check Check memory Checks debugger Creates executable files RWX flags setting unpack itself Check virtual network interfaces Tor DNS crashed 		5 6 5.2 M ZeroCERT

46834 2024-08-09 07:56 stealc_default.exe  

e78239a5b0223499bed12a752b893cad


Stealc Gen1 Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) Antivirus UPX Malicious Packer PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar Email Client Info Stealer Malware c&c Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		9 1 16 9 7.2 M ZeroCERT

46835 2024-08-09 07:57 GOLD.exe  

e71c0c5d72455dde6510ba23552d7d2f


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check PDB unpack itself crashed 		1.2 M ZeroCERT

46836 2024-08-09 09:25 file3333.exe  

978623ad6b4d9385c047d9315423c754


PE File PE64 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 M 46 ZeroCERT

46837 2024-08-09 09:27 S%D0%B5tup1.exe  

ea4d0c345eec97f8ec7174b210798a56


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.6 M 37 ZeroCERT

46838 2024-08-09 09:27 file234.exe  

def6f274c14351d9cf0f49798b5a833d


Malicious Library Malicious Packer Antivirus UPX AntiDebug AntiVM PE File PE64 OS Processor Check PE32 VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs suspicious TLD Tofsee Windows Discord Remote Code Execution DNS 		6 15 10 2 12.0 M 49 ZeroCERT

46839 2024-08-09 09:30 file200h.exe  

5325fec9552fa277891e782b77a475ee


Malicious Library Malicious Packer Antivirus UPX AntiDebug AntiVM PE File PE64 OS Processor Check PE32 VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs Tofsee Windows Discord Remote Code Execution DNS 		6 15 8 2 12.0 M 55 ZeroCERT

46840 2024-08-09 09:32 setup2.exe  

098621a8fa13fdfd4ce2d9c3dc010092


Malicious Library Malicious Packer Antivirus UPX AntiDebug AntiVM PE File PE64 OS Processor Check PE32 VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces malicious URLs Tofsee Windows Discord Remote Code Execution DNS 		7 17 10 2 12.2 M 54 ZeroCERT

46841 2024-08-09 10:06 file3333.exe  

978623ad6b4d9385c047d9315423c754


Vidar PE File PE64 VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself 		2.4 M 46 r0d

46842 2024-08-09 10:47 89.hta  

f904e8a5141b08f3f8e2121459f539fe


Generic Malware Downloader Antivirus AntiDebug AntiVM PE File DLL PE32 .NET DLL VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder Windows ComputerName DNS Cryptographic key 		1 1 3 11.4 M 18 ZeroCERT

46843 2024-08-09 10:48 envifa.vbs  

23cef0c9c3e02cc2bdc8516b889d1191


Generic Malware Antivirus Hide_URL PowerShell Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 10.0 ZeroCERT

46844 2024-08-09 10:48 sostener.vbs  

23cef0c9c3e02cc2bdc8516b889d1191


Generic Malware Antivirus Hide_URL PowerShell Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 10.0 ZeroCERT

46845 2024-08-09 10:49 Run112.exe  

85a9287c26148788deff9c77bab244b3


Emotet Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 1 3.6 M 41 ZeroCERT

keyword