popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48511 2024-09-30 11:25 MAS_AIO.cmd  

afc260e4b427800bfd63abb49b3681ce


Hide_EXE Generic Malware Downloader Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 5.8 M 3 ZeroCERT

48512 2024-09-30 11:27 useraccount.aspx.exe  

9b73c82d8f0e6cae3bce7b2fc98b3383


Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware Checks debugger unpack itself Tofsee crashed 		4 2 2.4 M 48 ZeroCERT

48513 2024-09-30 11:28 dllhost.exe  

249f4ca7f1cc801c87cebd0cdf0b398e


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 4 6 9.0 M 46 ZeroCERT

48514 2024-09-30 11:29 Documents.exe  

5ed596968000a68132c532f48762d82f


Malicious Packer UPX PE File PE32 VirusTotal Malware unpack itself DNS 		1 4.0 M 64 ZeroCERT

48515 2024-09-30 11:29 svhost.exe  

b58c2506b40b7c00bb2e7a6651bfc9a9


UPX PE File PE64 VirusTotal Malware 		0.6 M 9 ZeroCERT

48516 2024-09-30 11:29 xmrig.exe  

5fba8ae226b096da3b31de0e17496735


XMRig Miner Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware unpack itself ComputerName 		2.0 M 59 ZeroCERT

48517 2024-09-30 11:32 Macro2.exe  

e0dbf63fbaba9fd87d48a9a0f1147c18


Malicious Packer UPX PE File PE32 VirusTotal Malware unpack itself DNS 		1 4.0 M 62 ZeroCERT

48518 2024-09-30 11:34 Journal.exe  

85b5bf3202121bcc048ae8b5b04595bd


Malicious Library PE File PE64 VirusTotal Malware RWX flags setting DNS crashed 		2 4.0 M 58 ZeroCERT

48519 2024-09-30 11:34 Session.exe  

370dcc1d0729d93d08255de011febaa4


Malicious Library PE File PE64 VirusTotal Malware RWX flags setting DNS crashed 		1 4.0 M 56 ZeroCERT

48520 2024-09-30 11:34 bin.exe  

aef23e8a6616618755598ea6643c457d


Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer VirusTotal Malware buffers extracted Creates executable files unpack itself AppData folder Browser 		21 20 5.4 M 55 ZeroCERT

48521 2024-09-30 11:36 AQ2.exe  

f5982c5d15d53a2fb2aaf0f473742082


UPX PE File PE32 VirusTotal Malware 		2.2 M 45 ZeroCERT

48522 2024-09-30 11:36 66f6fb069f739_sgsfdgsda.exe  

7bd092de7377de68b4f563563b616b10


PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself WriteConsoleW ComputerName 		3.0 M 51 ZeroCERT

48523 2024-09-30 11:37 66f6995655161_GoogleUpdater.ex...  

f19c11a58219d9abea718193816c24f4


Malicious Library PE File .NET EXE PE32 Lnk Format GIF Format VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself AppData folder human activity check Windows ComputerName DNS crashed 		1 7.6 M 49 ZeroCERT

48524 2024-09-30 11:38 Macro.vbs  

78bd7c85fd4223850c6ed4c4e98ffa62


Hide_EXE PE File PE32 VirusTotal Malware Creates executable files AppData folder DNS 		1 7.2 M 29 ZeroCERT

48525 2024-09-30 11:38 svchost.exe  

56fd972f1d650272de4508513de8a27d


PE File PE32 VirusTotal Malware AutoRuns suspicious privilege unpack itself suspicious process Windows DNS 		2 6.8 M 60 ZeroCERT

keyword