popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48181 2024-09-20 10:39 vfdshf.exe  

6d1999f1096cee3f06507e0d896d7c4a


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 1 15.4 M 47 ZeroCERT

48182 2024-09-20 10:39 66ec34ea3a1b3_app3454636138226...  

826eb90d730bf03e39d78daa585364bc


RedLine stealer RedLine Infostealer Generic Malware UltraVNC Malicious Library UPX Antivirus ScreenShot PWS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		2 6 15.0 46 ZeroCERT

48183 2024-09-20 10:42 66ec71a8dd7f7_setup33.exe#lyla  

56e3db9291d886a337ba3d4a12828bca


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.0 M 31 ZeroCERT

48184 2024-09-20 10:43 shhds.exe  

3c01f02d55374baace8ac5b33fe49f0e


Stealc Client SW User Data Stealer ftp Client info stealer Antivirus Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware download Vidar VirusTotal Malware c&c PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName DNS plugin 		9 1 15 2 14.0 M 49 ZeroCERT

48185 2024-09-20 10:44 in.ps1  

04441f657f719cbac9be106030c5af9c


Generic Malware Antivirus unpack itself WriteConsoleW Windows Cryptographic key 		1 0.8 ZeroCERT

48186 2024-09-20 10:45 AntonioIssn.exe  

6e75f9fb3b72d60fd52dbdfff338f33f


Generic Malware Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		6.6 M 26 ZeroCERT

48187 2024-09-20 10:46 ldfnsa.exe  

731a25a9b1f2c31056f7bd75c71deac4


Antivirus ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows 		8.0 M 44 ZeroCERT

48188 2024-09-20 10:47 66ebf725efe38_lyla.exe  

117cd56896073eaa680d408fe7fb51c8


Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 DLL Malware download VirusTotal Malware Malicious Traffic AppData folder suspicious TLD CryptBot DNS 		1 2 3 3.6 M 52 ZeroCERT

48189 2024-09-20 10:47 Inquiry-Dubai.js  

b54f5c7cb5ac3d69127941e40966ab0c


Generic Malware Antivirus ActiveXObject VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.8 12 ZeroCERT

48190 2024-09-20 10:47 66ec3528901bb_winupdate11.exe#...  

4fe072b888cd64ff01d73d8b80bfcf3e


Malicious Library .NET framework(MSIL) PE File .NET EXE MSOffice File PE32 VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3.6 M 28 ZeroCERT

48191 2024-09-20 10:51 Desktop_Explorer.exe  

acccb5d6308487da88b2f05b2f4f6234


Generic Malware Malicious Library Malicious Packer UPX Anti_VM PE File DllRegisterServer dll PE32 OS Processor Check VirusTotal Malware 		0.8 M 11 ZeroCERT

48192 2024-09-20 10:51 66ebf725efe38_lyla.exe  

117cd56896073eaa680d408fe7fb51c8


Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 DLL Malware download VirusTotal Malware Malicious Traffic AppData folder CryptBot DNS 		1 2 3 3.2 M 52 ZeroCERT

48193 2024-09-20 10:53 66ec0e61998bf_setup30.exe  

6171efb98ce36e0d0f9e6a416c15afb8


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.0 M 37 ZeroCERT

48194 2024-09-20 10:57 66ecb44c35444_vfdhsgdf.exe  

4a8a0ccfecc930091116324c79c1006e


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 1 15.8 M 30 ZeroCERT

48195 2024-09-20 10:58 66ecb452ba19c_sfbdsgfd.exe  

242293154c0caabd9953b0b1804926a7


Stealc Client SW User Data Stealer LokiBot Gen1 ftp Client info stealer Generic Malware Downloader Antivirus Malicious Library UPX Malicious Packer Http API PWS HTTP Code injection Internet API Create Service Socket DGA ScreenShot Escalate p Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		11 7 21 3 17.8 M 29 ZeroCERT

keyword