popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
47101 2024-08-13 09:45 240903-회국회(정) 제1차 전체회의 의사일정안(결...  

f5f5a585a12df9cb406dde6b3e6da23d


AntiDebug AntiVM CHM Format VirusTotal Malware Code Injection Check memory unpack itself crashed 		2.8 30 ZeroCERT

47102 2024-08-13 09:45 Helpstore.exe  

fc2aa8460ff7dd8a4f121d75116161cf


Generic Malware Malicious Library Antivirus UPX PE File CAB PE32 OS Processor Check DLL VirusTotal Malware Creates executable files ComputerName Remote Code Execution 		2 4.4 35 ZeroCERT

47103 2024-08-13 10:23 240903-회국회(정) 제1차 전체회의 의사일정안(결...  

f5f5a585a12df9cb406dde6b3e6da23d


AntiDebug AntiVM CHM Format VirusTotal Malware Code Injection Check memory unpack itself 		2.6 30 ZeroCERT

47104 2024-08-13 10:27 240903-회국회(정) 제1차 전체회의 의사일정안(결...  

f5f5a585a12df9cb406dde6b3e6da23d


AntiDebug AntiVM CHM Format VirusTotal Malware Code Injection Check memory crashed 		2.4 30 ZeroCERT

47105 2024-08-13 10:44 arch1208_0924.7z  

f6b650c35ed4de1040e590b400db1ef3


Escalate priviledges PWS KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself 		1.6 ZeroCERT

47106 2024-08-13 11:06 arch1208_0924.7z  

f6b650c35ed4de1040e590b400db1ef3


Escalate priviledges PWS KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself 		1.6 M ZeroCERT

47107 2024-08-13 11:22 T9.exe  

762e2c938ec4a35e6b67fafb977fd05c


Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 2 5 1 11.4 M 30 r0d

47108 2024-08-13 11:29 T9.exe  

762e2c938ec4a35e6b67fafb977fd05c


RedLine stealer Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 2 5 1 11.4 M 30 r0d

47109 2024-08-13 16:00 NursultanClient.exe  

b3d8b18d332153db164df8b55c3272a4


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Check memory crashed 		1.2 14 ZeroCERT

47110 2024-08-13 17:09 sahost.exe  

29e3de6b17d0fdfb360834f038b59a39


NSIS Suspicious_Script_Bin Malicious Library UPX Anti_VM PE File PE32 DLL VirusTotal Malware AppData folder 		1.4 M 24 ZeroCERT

47111 2024-08-13 17:10 sahost.exe  

d996f588469a7a1af5ababce991b42f5


Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 6 9 15.2 M 22 ZeroCERT

47112 2024-08-13 17:11 sweetrosefalvourcakeandbutterb...  

04f40400495c1c17270f9c71e6d40717


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS DDNS crashed 		2 3 2 1 5.0 M 34 ZeroCERT

47113 2024-08-13 17:12 mondayequitosssMPDW-constraint...  

1b1dd5797314342cfb948c6cfbac09b0


Generic Malware Antivirus Hide_URL PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.2 ZeroCERT

47114 2024-08-13 17:14 madamwebbbbbbMPDW-constraints....  

3dfbd33df96998e1f6a37dc298a75ca4


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.6 M 3 ZeroCERT

47115 2024-08-13 17:14 greeceeeeArchive.vbs  

9218fd739d9081a575a2f5f1402e6fec


Generic Malware Antivirus PowerShell VBScript powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key Dropper 		1 3 3 1 10.0 M ZeroCERT

keyword