popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5131 2024-09-22 15:11 66eef0d27af21_vfdsgfd.exe  

76b81bbaa929e92a0885267869e62fdf


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 13.8 M ZeroCERT

5132 2024-09-22 15:08 Autoupdate.exe  

0a391949514f69ddc5a2d6e069aac9f1


Malicious Library Antivirus UPX PE File .NET EXE PE32 Lnk Format GIF Format VirusTotal Malware PDB suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check ComputerName 		5.0 45 ZeroCERT

5133 2024-09-22 15:08 feelniceforgivenmegreatthingst...  

2db98a27e71fef64135ce5e259d5a8c4


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 1 4.8 41 ZeroCERT

5134 2024-09-22 14:59 h0r0zx00x.mpsl  

05845cd46412b372eefb06c502d876fb


UPX AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.4 36 ZeroCERT

5135 2024-09-22 14:59 66eef0cfe6c57_vdcsdgf15.exe  

0656946b783a6df8ff57c45846e49de1


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 16.2 28 ZeroCERT

5136 2024-09-22 04:16 2.exe  

294fab1523dc3b50cbcc120e67946a5b


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check Malware Malicious Traffic Creates executable files DNS 		1 1 2.4 M guest

5137 2024-09-21 14:18 random.exe  

9b638c429ac9e4c032d7e6852b464dbd


Generic Malware Malicious Library UPX Code injection AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself malicious URLs installed browsers check Ransomware Exploit Browser crashed 		9.0 M 14 ZeroCERT

5138 2024-09-21 14:15 sdhsfd.exe  

ea754070163f8eca914b259096d834f0


Stealc Client SW User Data Stealer Gen1 ftp Client info stealer Generic Malware Antivirus Malicious Library UPX Malicious Packer Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		9 3 17 2 14.6 M 45 ZeroCERT

5139 2024-09-21 14:11 66edb89bc4073_crypted.exe#xin  

d687af3b103399aa245807bb719878b7


RedLine stealer Antivirus PWS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself DNS 		1 8.6 M 48 ZeroCERT

5140 2024-09-21 14:09 66ed33772bbe7_vdfhsjf16.exe  

5f1ea69f876e6c0b3f52c49cb56a5933


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 17.6 M 44 ZeroCERT

5141 2024-09-21 14:07 game.exe  

b5466eeb2b35e47ffc7230ec00d6d4c6


Stealc CryptBot Themida PE File PE32 Malware download VirusTotal Malware c&c Malicious Traffic Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Stealc Windows ComputerName DNS crashed 		2 1 1 2 7.4 M 36 ZeroCERT

5142 2024-09-21 14:05 66ebb3bf78bd6_Send.exe#111us30...  

098e15e88e5332253356c78badf8d479


UPX PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Malicious Traffic buffers extracted Creates executable files unpack itself Windows RCE DNS 		1 1 1 9.0 M 36 ZeroCERT

5143 2024-09-21 14:03 66ed33717e4c1_vfdshfdag15.exe  

cd681a24c9d79c3af8caa1843296a062


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 16.0 M 47 ZeroCERT

5144 2024-09-21 14:02 random.exe  

e0bb28202965797f022195320f3287d5


Stealc Amadey Gen1 Themida Generic Malware Malicious Library UPX Malicious Packer Code injection Anti_VM AntiDebug AntiVM PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download Amadey FTP Client Info Stealer Vidar Email Client Info Stealer Malware c&c AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare AppData folder malicious URLs sandbox evasion VMware anti-virtualization installed browsers check Ransomware Stealc Stealer Windows Exploit Browser Email ComputerName DNS Software crashed plugin 		10 3 19 3 22.2 M ZeroCERT

5145 2024-09-21 14:02 66ed336eac985_vdfhssfdg12.exe  

6b082832f014548bf1703ddaed1e16b9


Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 15.4 M 48 ZeroCERT

keyword