popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5206 2024-09-19 10:38 QuickBooks_Desktop_Setup.msi  

675d05c2a81ec2148a6181ad1c60813d


Generic Malware Malicious Library Malicious Packer UPX MSOffice File CAB OS Processor Check PE File DLL PE32 VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself AppData folder AntiVM_Disk VM Disk Size Check Tofsee ComputerName DNS crashed 		1 3 5.2 M 23 ZeroCERT

5207 2024-09-19 10:37 game.exe  

b68de602a612382378707692d914e63e


Stealc Gen1 Themida Generic Malware Malicious Library UPX Malicious Packer PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar Email Client Info Stealer Malware c&c Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare sandbox evasion VMware anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		9 2 15 1 11.4 M ZeroCERT

5208 2024-09-19 10:36 vlsadg.exe  

a714209db1b2b68a95e680df111922ed


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 1 16.0 M 48 ZeroCERT

5209 2024-09-19 10:34 lnfsda.exe  

6f4a0ae013610785ad54438f4af26f1a


Antivirus ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows 		8.0 M 49 ZeroCERT

5210 2024-09-19 10:33 66eaadab755d2_installs.exe#ijs...  

00b2660d589fe136f015a148d7f4dee0


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself 		3.4 M 44 ZeroCERT

5211 2024-09-19 10:32 66eaee5323f5d_setup3.exe  

a7d7d48f4a9bb7718ec17d11fba9cad8


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself RCE 		2.2 M 27 ZeroCERT

5212 2024-09-19 10:31 66eafb3a8225e_crypted.exe#1  

c7fce4265a5346ff9d2413813886afce


RedLine stealer Antivirus ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6 13.4 M 29 ZeroCERT

5213 2024-09-19 10:30 QuickBooks_Desktop_Manager.msi  

136797111e25e1a2014d70cc4e343f10


Generic Malware Malicious Library Malicious Packer UPX MSOffice File CAB OS Processor Check PE File DLL PE32 VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself AppData folder AntiVM_Disk VM Disk Size Check Tofsee ComputerName 		2 1 4.6 M 21 ZeroCERT

5214 2024-09-19 10:29 vkfsags12.exe  

fede424830238cf2c2e661b5cb12e584


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 6 3 1 17.0 M 49 ZeroCERT

5215 2024-09-19 10:28 vfagms15.exe  

89599341387624a951de84b66f9ec572


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 1 16.0 M 48 ZeroCERT

5216 2024-09-19 10:27 231.exe  

4fa734db8e9f7ce5ecd217b34ecc6969


Gen1 Generic Malware NSIS Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer UPX Javascript_Blob AntiDebug AntiVM PE File PE32 MZP Format OS Processor Check DLL PE64 PNG Format DllRegisterServer dll Browser Info Stealer Malware download FTP Client Info Stealer NetWireRC VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder installed browsers check SectopRAT Windows Browser Backdoor ComputerName DNS Cryptographic key Software crashed keylogger 		1 1 3 12.4 M 39 ZeroCERT

5217 2024-09-19 10:27 66ea645129e6a_jacobs.exe  

d60d266e8fbdbd7794653ecf2aba26ed


PE File PE64 VirusTotal Cryptocurrency Miner Malware DNS CoinMiner 		2 1 1.6 M 33 ZeroCERT

5218 2024-09-19 10:26 onePackage.exe  

6c2db0ef90b27f880a1566de7711e6c6


Generic Malware Malicious Library Malicious Packer UPX Anti_VM PE File DllRegisterServer dll PE32 OS Processor Check 		0.2 M ZeroCERT

5219 2024-09-19 10:21 euro.exe  

e89f78e780b64eeb920d5dfebd033ffa


AgentTesla Malicious Library Malicious Packer UPX PE File OS Memory Check .NET EXE PE32 OS Name Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Browser Email ComputerName DNS Software crashed 		1 4 3 6.6 M 59 ZeroCERT

5220 2024-09-19 10:19 vhgwe12.exe  

b9e09917fbda00f390cf009dc958051d


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 1 16.6 M 49 ZeroCERT

keyword