popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5116 2024-09-22 17:26 ypqhgl.exe  

990ddf57779c6d17b6885dab3f5c3494


UPX PE File PE32 VirusTotal Malware DNS 		1 1.8 M 50 ZeroCERT

5117 2024-09-22 17:25 Traxx1.exe  

937239c0053f3daec25ca7984676696a


ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Downloader 		1 1 6 10.0 M 55 ZeroCERT

5118 2024-09-22 17:24 66e579d0cbf2d_win.exe  

049d2f0e9e03c057d906287c2003331b


UPX PE File PE32 VirusTotal Malware AutoRuns Creates executable files Check virtual network interfaces Windows DNS 		4 6.4 M 45 ZeroCERT

5119 2024-09-22 17:23 audiodg.exe  

8b016746ea349838ed337927770248eb


Formbook Gen1 Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL FormBook Browser Info Stealer Malware download VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser 		8 9 1 6 6.4 M 47 ZeroCERT

5120 2024-09-22 17:23 66ecb454d2b4a_lgfdsjgds.exe  

384a847ad2833788fa253433fd2eea8d


Antivirus ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS 		1 8.6 M 48 ZeroCERT

5121 2024-09-22 17:21 66eef0d509347_vfdshg16.exe  

4ae2d1685d2732cfcd128560424c53cc


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 6 3 16.6 M 28 ZeroCERT

5122 2024-09-22 17:20 seethepicturetogetmebacktheupd...  

8ba173734c1a8532e0b2ebcb3b6602ab


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 1 4.8 M 41 ZeroCERT

5123 2024-09-22 17:19 wecreatednewthingsinthisworldt...  

16e108820a6288c25887dbc7f7dff60a


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		8 10 6 6 5.0 M 35 ZeroCERT

5124 2024-09-22 15:22 config.exe  

1734e1fd7e4ca651b03421c5a75441e9


Emotet Generic Malware Malicious Library Malicious Packer ASPack UPX PE File PE32 OS Processor Check VirusTotal Malware PDB Check memory unpack itself RCE 		2.0 M 11 ZeroCERT

5125 2024-09-22 15:19 game.exe  

49a4df6234a85f29ff15b8d58dcb995b


Generic Malware Malicious Library ASPack UPX Anti_VM PE File PE32 OS Processor Check VirusTotal Malware PDB DNS 		1 1.8 M 11 ZeroCERT

5126 2024-09-22 15:17 svchost.exe  

d2b9d12a630cf96b6d4da31de2af0e35


Malicious Library UPX AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns Code Injection Check memory ICMP traffic unpack itself Windows utilities suspicious process AppData folder Windows DNS 		3 8.4 60 ZeroCERT

5127 2024-09-22 15:15 66eef0d7ec94e_vrewgh12.exe  

ebc0f29cf652faa6f21b72b4399d8274


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 15.8 M 32 ZeroCERT

5128 2024-09-22 15:14 66eef0cc8034a_sdgdfs.exe  

9a29528b1463ae389bd3e03e4e686a56


Stealc Client SW User Data Stealer LokiBot Gen1 ftp Client info stealer Generic Malware Downloader Antivirus Malicious Library UPX Malicious Packer Http API PWS HTTP Code injection Internet API Create Service Socket DGA ScreenShot Escalate priviled Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		12 7 21 2 19.0 M 34 ZeroCERT

5129 2024-09-22 15:13 qq-1950222243-x%e2%80%aexcod.e...  

06a0c92c691e980875b3345ce72fe78b


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check PE64 MSOffice File VirusTotal Malware PDB MachineGuid Code Injection Check memory Creates executable files unpack itself RCE DNS crashed 		1 8.2 M 53 ZeroCERT

5130 2024-09-22 15:13 nate.exe  

697b27aac08e83e9e231721e7a03ae86


Amadey Themida Generic Malware UPX Antivirus PE File PE32 Browser Info Stealer Malware download Amadey Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files exploit crash unpack itself Checks Bios Detects VMWare suspicious process AppData folder VMware anti-virtualization installed browsers check Windows Exploit Browser ComputerName DNS Cryptographic key crashed 		2 2 3 1 13.8 M ZeroCERT

keyword