popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
47611 2024-08-27 13:48 66ccd175ef453_crypted.exe#1  

cd1dd0289c092923eb8985e8d86d215f


RedLine stealer Antivirus ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6 12.8 M 23 ZeroCERT

47612 2024-08-27 13:49 V1.1.exe  

7b1d21282a65bac0410541f7466c7038


Generic Malware Malicious Library Downloader Malicious Packer ASPack UPX PE File PE32 OS Processor Check PNG Format MZP Format JPEG Format Malware download VirusTotal Malware AutoRuns Check memory Creates executable files ICMP traffic RWX flags setting unpack itself AppData folder suspicious TLD sandbox evasion Tofsee Interception Windows Remote Code Execution DNS crashed 		2 11 7 11.0 M 59 ZeroCERT

47613 2024-08-27 13:49 66cc394a4818a_vlawg.exe#space  

be02035f9559cf4aba601b45a1677d92


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 15.8 M 51 ZeroCERT

47614 2024-08-27 13:50 patcher.exe  

d2e7813509144a52aaa13043a69a47bd


Suspicious_Script_Bin Malicious Library UPX PE File PE64 VirusTotal Malware Creates executable files suspicious process DNS crashed 		1 1 1 2.0 M 6 ZeroCERT

47615 2024-08-27 13:50 66cc394d4d8b2_sekwm.exe#space  

d58ddba7f2d064d327f45f577f2e41ec


Stealc Client SW User Data Stealer LokiBot Gen1 ftp Client info stealer Generic Malware Downloader Antivirus Malicious Library UPX Malicious Packer ScreenShot Http API PWS Create Service Socket DGA Escalate priviledges Steal credential Sniff Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		12 7 21 3 18.8 M 50 ZeroCERT

47616 2024-08-27 13:50 [UPG]CSS.exe  

99b098b23ced1a199145fe5577c9de91


Generic Malware Themida Packer Malicious Library UPX Anti_VM PE File PE32 MZP Format JPEG Format OS Processor Check DLL Malware download VirusTotal Malware Malicious Traffic Check memory buffers extracted Creates executable files RWX flags setting unpack itself AppData folder sandbox evasion Tofsee Interception Windows Update Trojan DNS keylogger 		36 6 3 9.0 M 42 ZeroCERT

47617 2024-08-27 13:52 WFPExp.exe  

1c9ccfcd3e92399642fdd1a34afab2ef


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check PDB Remote Code Execution 		0.6 ZeroCERT

47618 2024-08-27 13:53 0day.js  

271dea4d0bdfa80e4ad01257508571cc

VirusTotal Malware 		0.4 4 ZeroCERT

47619 2024-08-27 13:54 Major_0x00029EFE4AF1E366.exe  

fa3d03c319a7597712eeff1338dabf92


Generic Malware Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		1.6 M 30 ZeroCERT

47620 2024-08-27 13:56 Office2024.exe  

df92abd264b50c9f069246a6e65453f0


PE File PE64 VirusTotal Cryptocurrency Miner Malware DNS CoinMiner 		6 2 1.4 M 58 ZeroCERT

47621 2024-08-27 13:59 dl  

e21c27cc8cb10d6829b095c625b41442


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Windows DNS 		1 3.2 M 25 ZeroCERT

47622 2024-08-27 14:19 IEupdation.hta  

d8c516959ec5b1379fc9fcc30def38a1


Generic Malware Antivirus Downloader AntiDebug AntiVM PE File DLL PE32 .NET DLL VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder Windows ComputerName DNS Cryptographic key 		1 1 4 11.6 22 ZeroCERT

47623 2024-08-27 15:10 tjqdq.exe  

f88d5c87a0811b9b91f9c77d714fdb68


Emotet Generic Malware Malicious Library Malicious Packer ASPack UPX PE File DllRegisterServer dll PE32 OS Processor Check DLL MZP Format VirusTotal Malware Creates executable files AppData folder sandbox evasion Windows Browser Remote Code Execution DNS 		2 1 1 6.0 60 ZeroCERT

47624 2024-08-27 15:12 fodhelper.exe  

fcb34a54159d0de7cb5fa2fae1c82e72


Generic Malware Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Java Browser DNS 		16 19 6 5.8 ZeroCERT

47625 2024-08-27 15:13 PXray_Cast_Sort.exe  

fe517ecfbb94a742e2b88d67785b87bc


Malicious Library UPX PE File PE32 MZP Format VirusTotal Malware unpack itself 		2.0 29 ZeroCERT

keyword