popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48586 2024-10-02 14:39 cc.js  

c63888086e1646654a1e162fde69c0ff


XWorm WebCam PWS KeyLogger AntiDebug AntiVM VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName DNS keylogger 		12.0 21 ZeroCERT

48587 2024-10-02 14:40 66fb2538369cb_EdgeUpdater.exe  

a83b2a5ff3529936192398c88edd27a3


Confuser .NET PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 33 ZeroCERT

48588 2024-10-02 14:40 66fbd9a4db4c9_GovernmentalSa.e...  

5e55a47b6d7053f9d1ff19539863b8c2


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		6.0 M 16 ZeroCERT

48589 2024-10-02 14:42 66fbfcc301a31_swws.exe  

022cc85ed0f56a3f3e8aec4ae3b80a71


PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself WriteConsoleW ComputerName 		2.6 M 22 ZeroCERT

48590 2024-10-02 14:43 66fc5c187ba75_lyla343.exe  

007fa2c8c8ab1fbc6867e44db35c063e


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		1.6 M 27 ZeroCERT

48591 2024-10-02 14:44 66fbfccd837ac_vadggdsa.exe  

237af39f8b579aad0205f6174bb96239


PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself WriteConsoleW ComputerName 		2.6 M 25 ZeroCERT

48592 2024-10-03 05:10 cliloc_fix.exe  

48381193bc2b85595549b519a250d7cf


Gen1 Generic Malware Malicious Library ASPack UPX Anti_VM PE File PE64 OS Processor Check DLL icon ZIP Format VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself Ransomware 		2.8 5 guest

48593 2024-10-04 08:40 7f3c2473d1e6.exe#sp_vid  

f6abf83869f601a7addec780dd52f03b


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Generic Malware Malicious Library UPX ASPack Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE FTP Client Info Stealer Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software crashed 		1 5 3 1 15.0 M ZeroCERT

48594 2024-10-04 08:44 956d73b7f041.exe#default15st  

cd15f137f9979ce6329ff8c21d508caa


Stealc Client SW User Data Stealer Gen1 ftp Client info stealer Generic Malware Malicious Library UPX Malicious Packer Http API PWS HTTP Internet API AntiDebug AntiVM PE File PE32 OS Processor Check DLL Browser Info Stealer Malware download FTP Client Info Stealer Vidar Email Client Info Stealer Malware c&c Code Injection Malicious Traffic Check memory buffers extracted Creates shortcut Creates executable files unpack itself Collect installed applications Check virtual network interfaces AntiVM_Disk sandbox evasion anti-virtualization VM Disk Size Check installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		9 1 16 1 15.0 M ZeroCERT

48595 2024-10-04 08:46 BANDICUT.msi  

087d510f4d69f6faa479e4919f51a175


Generic Malware Malicious Library Antivirus MSOffice File CAB OS Processor Check VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		4.2 M 27 ZeroCERT

48596 2024-10-04 08:46 f2e7fcb20146.exe#sp_sl  

2915d563d12794d5278496fc778de6dd


Stealc Client SW User Data Stealer Gen1 ftp Client info stealer Generic Malware Downloader Malicious Library UPX Malicious Packer Http API PWS HTTP Internet API Create Service Socket DGA ScreenShot Escalate priviledges Steal credential Sniff Audio Browser Info Stealer Malware download FTP Client Info Stealer Vidar Email Client Info Stealer Malware c&c Code Injection Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Collect installed applications suspicious process sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		10 3 16 3 13.8 M ZeroCERT

48597 2024-10-04 08:48 das.msi  

3cb6b99b20930ac0dbadc10899dc511e


Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) AntiDebug AntiVM MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk VM Disk Size Check ComputerName crashed 		3.8 M 1 ZeroCERT

48598 2024-10-04 11:14 niceideasgirlsknowwellwithnewg...  

b7fbbb66d072c56f7d5d0f2e55e1385a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 1 4.6 M 37 ZeroCERT

48599 2024-10-04 11:16 eventthingsaregreattogetmethin...  

33083e3d8cad434bfff8cdb97032babe


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 1 4.8 M 40 ZeroCERT

48600 2024-10-04 11:19 javumarfirst.exe  

506f20dc6d2d9a4bd2725a726679b74e


Generic Malware UPX PE File PE32 DLL Malware download VirusTotal Malware Malicious Traffic AppData folder suspicious TLD CryptBot DNS 		1 2 3 3.0 M 11 ZeroCERT

keyword