popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48241 2024-09-22 15:17 svchost.exe  

d2b9d12a630cf96b6d4da31de2af0e35


Malicious Library UPX AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns Code Injection Check memory ICMP traffic unpack itself Windows utilities suspicious process AppData folder Windows DNS 		3 8.4 60 ZeroCERT

48242 2024-09-22 15:19 game.exe  

49a4df6234a85f29ff15b8d58dcb995b


Generic Malware Malicious Library ASPack UPX Anti_VM PE File PE32 OS Processor Check VirusTotal Malware PDB DNS 		1 1.8 M 11 ZeroCERT

48243 2024-09-22 15:22 config.exe  

1734e1fd7e4ca651b03421c5a75441e9


Emotet Generic Malware Malicious Library Malicious Packer ASPack UPX PE File PE32 OS Processor Check VirusTotal Malware PDB Check memory unpack itself Remote Code Execution 		2.0 M 11 ZeroCERT

48244 2024-09-22 17:19 wecreatednewthingsinthisworldt...  

16e108820a6288c25887dbc7f7dff60a


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		8 10 6 6 5.0 M 35 ZeroCERT

48245 2024-09-22 17:20 seethepicturetogetmebacktheupd...  

8ba173734c1a8532e0b2ebcb3b6602ab


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		3 1 4.8 M 41 ZeroCERT

48246 2024-09-22 17:21 66eef0d509347_vfdshg16.exe  

4ae2d1685d2732cfcd128560424c53cc


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 6 3 16.6 M 28 ZeroCERT

48247 2024-09-22 17:23 66ecb454d2b4a_lgfdsjgds.exe  

384a847ad2833788fa253433fd2eea8d


Antivirus ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS 		1 8.6 M 48 ZeroCERT

48248 2024-09-22 17:23 audiodg.exe  

8b016746ea349838ed337927770248eb


Formbook Gen1 Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL FormBook Browser Info Stealer Malware download VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser 		8 9 1 6 6.4 M 47 ZeroCERT

48249 2024-09-22 17:24 66e579d0cbf2d_win.exe  

049d2f0e9e03c057d906287c2003331b


UPX PE File PE32 VirusTotal Malware AutoRuns Creates executable files Check virtual network interfaces Windows DNS 		4 6.4 M 45 ZeroCERT

48250 2024-09-22 17:25 Traxx1.exe  

937239c0053f3daec25ca7984676696a


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Downloader 		1 6 10.0 M 55 ZeroCERT

48251 2024-09-22 17:26 ypqhgl.exe  

990ddf57779c6d17b6885dab3f5c3494


UPX PE File PE32 VirusTotal Malware DNS 		1 1.8 M 50 ZeroCERT

48252 2024-09-22 17:27 weskineverythingtobeperfectwit...  

c496e9e3167af07c0c305a267d462140


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		3 1 4.8 M 40 ZeroCERT

48253 2024-09-22 17:29 66eea6336b153_app1654040698346...  

e8e6cd9ec48fafccc174f7bf07d045e2


RedLine stealer Antivirus ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 10.8 M 42 ZeroCERT

48254 2024-09-22 17:29 66e8772555389_lsndfsg.exe  

a5098dee7d78acfb0294523855906aad


Antivirus PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself WriteConsoleW ComputerName 		3.0 M 45 ZeroCERT

48255 2024-09-22 17:31 66ef2d38305f6_crypted.exe#1  

c61cc62b59b5959951d1158887b20b7b


RedLine stealer Antivirus ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6 12.8 M 28 ZeroCERT

keyword