popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5971 2024-02-02 09:18 start.exe  

b303dde38d52546dcaa7a1021dc95d84


Cryptocurrency_miner XMRig Miner Generic Malware .NET framework(MSIL) UPX Antivirus Malicious Library Malicious Packer PE32 PE File .NET EXE PE64 OS Processor Check VirusTotal Malware powershell AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		7 3 5 4 11.2 M 54 ZeroCERT

5972 2024-02-02 09:18 rdpcllp.exe  

05a607cfc9ac7c66d4ce77dde0a2e491


PE File PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency Remote Code Execution DNS CoinMiner 		2 1 2.0 51 ZeroCERT

5973 2024-02-02 09:16 firefoxsunny.exe  

ffd6c86af20c38cccffcd9b0e15ece4c


Hide_EXE Downloader Malicious Library UPX ScreenShot DNS Create Service Socket DGA Http API Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE32 PE File M VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Windows Browser ComputerName crashed 		1 11.8 13 ZeroCERT

5974 2024-02-02 09:15 RDX.exe  

f733785f9d088490b784d4dc5584ebfb


RedlineStealer RedLine stealer .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 7.8 40 ZeroCERT

5975 2024-02-02 09:13 meta12.exe  

455af7b85c5f2f4f7bd03fccc9f38ffe


RedLine Infostealer UltraVNC Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		2.6 29 ZeroCERT

5976 2024-02-02 09:13 xmrig.exe  

118c2d536d52dd30116baaf06dfe5e63


XMRig Miner Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware unpack itself ComputerName 		2.0 56 ZeroCERT

5977 2024-02-01 11:21 ouwediysnbosav.pdf.exe  

d417bfe203bb31ec8cc510494ae97f63


AgentTesla Malicious Library Malicious Packer UPX PE32 PE File .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		4 6 7.6 M 48 ZeroCERT

5978 2024-02-01 09:34 vk_seller1234_crypted.exe  

c8b5dcfbdbf417d517edf952f366ef7f


XMRig Miner Generic Malware Malicious Library UPX .NET framework(MSIL) Malicious Packer Antivirus PE32 PE File OS Processor Check .NET EXE PE64 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware powershell Microsoft AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		6 8 10 13.8 M 19 ZeroCERT

5979 2024-02-01 09:33 legend1234ff.exe  

1850ff637de86020fe977b676b5c81ca


PE32 PE File .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 M 22 ZeroCERT

5980 2024-02-01 09:31 x......x..........x..doc  

b3c0ce50761120df74269d25e8d57f90


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		3 3 3 4.6 M 34 ZeroCERT

5981 2024-02-01 09:31 Rosefromtitanic.vbs  

8527bea52d77fc7c2fff7add03a2f51c

VirusTotal Malware wscript.exe payload download Tofsee 		2 2 2 2.6 7 ZeroCERT

5982 2024-02-01 08:04 rty25.exe  

5fd7aff48d27771ca0aec6776afefb93


Malicious Packer UPX PE File PE64 PDB MachineGuid unpack itself Check virtual network interfaces Tofsee Remote Code Execution 		2 3 1 2.8 ZeroCERT

5983 2024-02-01 08:03 anydesk.exe  

32259010418da240da7f3a5d2b8e3981


PE32 PE File .NET EXE PDB Check memory Checks debugger unpack itself 		1.4 ZeroCERT

5984 2024-02-01 08:02 InstallSetup2.exe  

72291a2593e330da68e21589b3977f54


UPX PE32 PE File .NET EXE OS Processor Check PDB Check memory Checks debugger unpack itself 		1.4 ZeroCERT

5985 2024-02-01 08:01 d.exe  

15a9d8defb55dc7124128453c630e43c


PE32 PE File .NET EXE PDB Check memory Checks debugger unpack itself 		1.4 M ZeroCERT

keyword