popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46891 2024-08-10 12:50 sahost.exe  

9cef532829a4ca2cf13279ac134873d8


NSIS Generic Malware Malicious Library UPX Antivirus PE File PE32 DLL PE64 PNG Format VirusTotal Malware powershell suspicious privilege Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.4 M 20 ZeroCERT

46892 2024-08-10 12:50 file.exe  

e530d19a769bcd90ec3e92ebf08d68e9


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		6.0 M 44 ZeroCERT

46893 2024-08-10 12:52 Alg.exe  

12418163d74668e2670547aa5e56e2eb


Generic Malware Malicious Library ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Downloader 		1 1 6 11.0 M 20 ZeroCERT

46894 2024-08-10 12:53 VLC3.exe  

a7f1b43bb75327181bf5535f6eab329d


Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces malicious URLs Tofsee Windows DNS Cryptographic key 		2 4 2 2 14.4 M 32 ZeroCERT

46895 2024-08-10 12:54 reverse_shell.exe  

b880278dc937d923300f7223aeb1a5b8


Malicious Packer UPX PE File PE32 VirusTotal Malware unpack itself DNS 		1 4.0 M 67 ZeroCERT

46896 2024-08-10 12:55 66b5ace3a06b0_dozkey.exe  

1971d66193a4acc5be2af2c1d34c2d4d


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Generic Malware Malicious Library .NET framework(MSIL) UPX ASPack Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 15.6 M 23 ZeroCERT

46897 2024-08-10 12:56 random.exe  

a386741a24f6dd80f0a87a8af51c37c7


Malicious Library PE File PE32 VirusTotal Malware Check memory Checks debugger crashed 		2.4 M 50 ZeroCERT

46898 2024-08-10 12:57 555.exe  

ce4a4ba3f2215f59248f59cdc2240960


UPX PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 M 34 ZeroCERT

46899 2024-08-10 12:58 tools.exe  

f2bb9263e5a42975fcaab9b11293d7b2


Malicious Library PE File PE32 Malware download Cobalt Strike Cobalt VirusTotal Malware RWX flags setting unpack itself ComputerName DNS 		1 1 1 3.2 M 62 ZeroCERT

46900 2024-08-10 12:59 66b623c3b1dcb_Mowdiewart.exe  

b8d875d94fbd7df91b1dbbbc308a057f


RedLine stealer RedLine Stealer Malicious Library .NET framework(MSIL) ScreenShot PWS SMTP AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 5 9.6 M 39 ZeroCERT

46901 2024-08-10 13:01 P.exe  

fa9bdae586c029c45206012d681207ad


Generic Malware Malicious Library ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Trojan DNS 		1 1 6 9.8 M 31 ZeroCERT

46902 2024-08-10 13:02 armadegon.exe  

f5b93d3369d1ae23d6e150e75d2b6a80


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself VMware Windows Cryptographic key 		9.0 M 30 ZeroCERT

46903 2024-08-10 13:03 CC.exe  

0af6a0ec998bcaa184dd6829bf2690ba


Generic Malware Malicious Library PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS 		1 1 5 6.2 M 37 ZeroCERT

46904 2024-08-10 13:04 ReadilyAccompanied.exe  

9c557c498c29e5d37016400cf0899ac6


Generic Malware Downloader Malicious Library UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files Windows utilities suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Windows ComputerName 		6.4 M 5 ZeroCERT

46905 2024-08-10 13:08 nino.exe  

54a4376350631493186f19dfd5120d7b


Amadey Client SW User Data Stealer ftp Client info stealer Http API PWS Code injection AntiDebug AntiVM PE File PE32 Browser Info Stealer Malware download Amadey Vidar VirusTotal Malware c&c AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Checks Bios Collect installed applications Detects VMWare malicious URLs sandbox evasion VMware anti-virtualization installed browsers check Ransomware Stealc Stealer Windows Exploit Browser ComputerName DNS crashed plugin 		13 3 20 4 20.0 M 40 ZeroCERT

keyword