popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
47566 2024-08-26 09:42 build9.exe  

4e18e7b1280ebf97a945e68cda93ce33


Generic Malware Malicious Library PE File PE64 FTP Client Info Stealer VirusTotal Malware Malicious Traffic Check memory buffers extracted unpack itself Tofsee ComputerName Software 		1 2 1 4.6 M 50 ZeroCERT

47567 2024-08-26 09:42 pyld611114.exe  

43bce45d873189f9ae2767d89a1c46e0


Gen1 Generic Malware task schedule Downloader Malicious Library Malicious Packer UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP SMTP DNS Code injection Internet API FTP KeyLogger P2P VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Auto service suspicious process malicious URLs sandbox evasion WriteConsoleW Windows ComputerName Cryptographic key 		9.6 48 ZeroCERT

47568 2024-08-26 09:44 explorer.exe  

7bc9e427746a95ed037db5e0b3230780


Malicious Library Antivirus UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		4.0 61 ZeroCERT

47569 2024-08-26 09:47 new1.exe  

b5e07492b13633eacab4b4f57853b439


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 4.8 M 59 ZeroCERT

47570 2024-08-26 09:49 r57.exe  

6b9ea327b920218c777a34b3193826a2


UPX PE File PE32 VirusTotal Malware 		1.2 M 53 ZeroCERT

47571 2024-08-26 09:50 Trax1.exe  

18711ae6c482cdb5f19a25f933e03a4f


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS 		1 1 5 10.0 M 52 ZeroCERT

47572 2024-08-26 09:52 Trax.exe  

412ac0c0ab55be4b40d5684b69903f71


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS 		1 1 5 10.0 M 55 ZeroCERT

47573 2024-08-26 09:52 Traxx.exe  

49b48e143dd4eb70ceca12eab53fdaab


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Downloader 		1 1 6 10.0 M 52 ZeroCERT

47574 2024-08-26 09:54 i999.exe  

382d136bfe49570e8fae2d0cb76f63bd


UPX PE File PE32 VirusTotal Malware 		1.2 52 ZeroCERT

47575 2024-08-26 09:54 Suslo1.exe  

068c7a3563810d19a13f39ccc38772a3


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS 		1 1 5 10.0 53 ZeroCERT

47576 2024-08-26 09:56 Suselx.exe  

38ed1440052033df654a6b802b40b67e


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Downloader 		1 1 6 10.0 M 50 ZeroCERT

47577 2024-08-26 09:57 66ca490c039f9_BitcoinCore.exe  

74416a1d6fdb926a2f9ee076f6285580


Emotet Malicious Library UPX PE File PE64 MZP Format OS Processor Check VirusTotal Malware unpack itself 		2.0 M 12 ZeroCERT

47578 2024-08-26 09:58 6656.exe  

8da0a7af89f0002da56a74077357c5ec


UPX PE File PE32 VirusTotal Malware 		1.2 M 55 ZeroCERT

47579 2024-08-26 10:52 66c5db95d7392_2.exe  

a7faa38b05c649d15d6a094801ffd107


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6 8.2 M 60 ZeroCERT

47580 2024-08-26 10:52 66bf3574eb3f2_FocusesAttempted...  

635508b01c2a8f9ceb1ab024c149b020


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW Windows ComputerName 		5.8 M 13 ZeroCERT

keyword