popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
481 2024-08-30 18:11 1.exe  

e995bb419884d365528a38a57c9630be


Malicious Library Antivirus UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		4.0 M 62 ZeroCERT

482 2024-08-30 18:09 11wY502.exe  

68d82beae213cad62a60a6df1363b12f


Malicious Library Downloader VMProtect PE File PE64 VirusTotal Malware 		2.2 M 53 ZeroCERT

483 2024-08-30 18:09 66d0502b12496_MKna.exe#main  

f8afafba3e86d50ad9edce1d0ea179ab


Malicious Library UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		1.8 11 ZeroCERT

484 2024-08-30 16:39 374b481f704c5ac8d04e4d92f2df5e...  

6a5868425d6a234f502cc93da9013df2


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

485 2024-08-30 16:38 f5c9ee003dc4f1dd578a393102938f...  

a1a12d64ae5e98d717e4a31fac953a8d


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

486 2024-08-30 16:38 fd78ad3be58e5d0cbac1242ccdcbd1...  

874858781e07cb3c3ce013b9e11dd7bc


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

487 2024-08-30 16:37 7fda1e50488896f329561b30ea0c3f...  

8d2b522ca500a1fe0745223e1578ebae


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

488 2024-08-30 11:23 nvidia.exe  

4b3659cdd58a9f5cda08278568d65da1


Malicious Library VMProtect PE File PE64 VirusTotal Malware DNS 		1 2.4 M 21 ZeroCERT

489 2024-08-30 11:21 54.exe  

0b1d213e54d820dd3fefa386aa3e1f43


Generic Malware Downloader UPX PE File ftp PE64 OS Processor Check VirusTotal Malware PDB 		1.4 M 46 ZeroCERT

490 2024-08-30 11:20 MEmpEng.exe  

3412e23523a0f4f6da613485bd7fdb38


Formbook Generic Malware Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Java Browser DNS 		15 17 6 14 6.2 M 28 ZeroCERT

491 2024-08-30 11:16 mapp.exe  

cb466c26bb103105b293f2c6c9eecac8


Gen1 Generic Malware Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware PDB 		1.4 M 53 ZeroCERT

492 2024-08-30 11:14 66d0cd9a65b5d_vqwergf.exe#spac...  

70567fae269796bf407322d0a4435054


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware download Vidar VirusTotal Malware c&c PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications malicious URLs sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName DNS plugin 		2 1 5 1 13.4 M 26 ZeroCERT

493 2024-08-30 11:12 66d08591035ef_AttachmentDaught...  

abb713cf90e8345c0b6b79345cbdc9d6


Generic Malware Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		5.4 M 13 ZeroCERT

494 2024-08-30 11:10 u888.exe  

f4d6d6ea62cb666b6fee9d00bdb77350


UPX PE File PE32 VirusTotal Malware 		1.2 M 55 ZeroCERT

495 2024-08-30 11:09 66d0cd8fb6f7b_lgjfd.exe#space  

087f21847d13d50158683c834471728c


Antivirus ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.0 M 25 ZeroCERT

keyword