Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
47761 2024-09-02 11:17 random.exe  

82f430cb027d4089280c1a2a42335131


Stealc Amadey Lumma RedLine stealer Gen1 Emotet Generic Malware Admin Tool (Sysinternals etc ...) UPX Malicious Library Antivirus Malicious Packer .NET framework(MSIL) ScreenShot PWS AntiDebug Ant Browser Info Stealer Malware download Amadey FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder suspicious TLD sandbox evasion VMware anti-virtualization IP Check installed browsers check Kelihos Stealc CryptBot Stealer Windows Browser Email ComputerName DNS Cryptographic key Software crashed plugin
32 19 28 14 27.2 M 43 ZeroCERT

47762 2024-09-02 12:06 rkduajedzcrd.exe  

0838e4e90814a48e6122f4b0a2b2fc5f


Generic Malware PE File PE64 VirusTotal Malware DNS
2 1 1.4 59 guest

47763 2024-09-02 12:54 66cf818156193_ldjfnsfd.exe  

e377dae8bdf40a95db250e59842d2915


Antivirus ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself
7.4 M 56 ZeroCERT

47764 2024-09-02 13:34 1.exe  

17d51083ccb2b20074b1dc2cac5bea36


Malicious Library UPX PE File PE32 MZP Format OS Processor Check VirusTotal Malware unpack itself ComputerName crashed
3.0 35 ZeroCERT

47765 2024-09-02 13:34 ProlongedPortable.dll  

f67e91ea39ec8ae219cbd761d17329b7


UPX PE File DLL PE32 .NET DLL OS Processor Check VirusTotal Malware
0.6 11 ZeroCERT

47766 2024-09-02 13:34 Amadeus.exe  

36a627b26fae167e6009b4950ff15805


Generic Malware Malicious Library Malicious Packer UPX PE File DllRegisterServer dll PE32 OS Processor Check VirusTotal Malware
1.6 31 ZeroCERT

47767 2024-09-02 13:49 build.exe  

05c1baaa01bd0aa0ccb5ec1c43a7d853


Emotet RedLine stealer Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware DNS
1 1.6 M 36 ZeroCERT

47768 2024-09-02 13:52 Set-up.exe  

06b767bf2a7deac9b9e524c5b6986bf7


Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 DLL Malware download VirusTotal Malware Malicious Traffic AppData folder CryptBot DNS
1 2 3 1 3.0 M 30 ZeroCERT

47769 2024-09-02 13:52 GetSys.exe  

87939a5b42854b08804a9a0ae605b260


Generic Malware Malicious Library Malicious Packer UPX PE File DllRegisterServer dll PE32 OS Processor Check VirusTotal Malware
1.0 21 ZeroCERT

47770 2024-09-02 17:47 도양기업 20240610 송장 갑지.bmp.lnk...  

09b1213c8a336541a4849d65b937293f


Antivirus AntiDebug AntiVM Lnk Format GIF Format wget VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key
2 7.0 30 ZeroCERT

47771 2024-09-02 19:09 89dd2cc4-7e59-1dd1-c77c-04ad0c...  

36840d6d68314f0453c37097fac4c8d3


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName
3.4 guest

47772 2024-09-02 19:29 SCPSL_NicknameChanger.exe  

4da72dc49c901dc8e3f05ad298a9c85d


Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware PDB
0.6 1 guest

47773 2024-09-03 08:46 dw.exe  

ce4c0b76c5f987153e922371109f666a


UPX PE File PE32 Check memory Checks debugger unpack itself
1.0 ZeroCERT

47774 2024-09-03 08:50 1.exe  

2978ce3b334332c2bf8e6c45652c599c


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check AutoRuns Code Injection Check memory RWX flags setting Windows utilities suspicious process AppData folder Windows Remote Code Execution DNS
1 6.2 M ZeroCERT

47775 2024-09-03 08:55 smartscreen.exe  

7e1fa0f93773dc8861a92279b7db03c6


Gen1 Generic Malware Malicious Library Malicious Packer UPX PE File ftp PE64 OS Processor Check PDB
0.8 ZeroCERT