popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6211 2024-01-22 12:26 Oscrcelw.exe  

302ac1d64dabebfeb1ecb1ddbd1f46b0


PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 22 ZeroCERT

6212 2024-01-20 18:19 zonak.exe  

d1d8db81157f989532108d62c64cbc33


Amadey Malicious Packer UPX Malicious Library Anti_VM AntiDebug AntiVM PE32 PE File .NET EXE MSOffice File OS Processor Check DLL ZIP Format Browser Info Stealer Malware download Amadey FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check Tofsee Ransomware Windows Update Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		21 17 18 7 19.6 M ZeroCERT

6213 2024-01-20 18:17 sl2_29.exe  

bbe98cc2bf5ce0c0bb4fb74370e2af68


PE File PE64 VirusTotal Malware DNS crashed 		2 1 2.0 M 30 ZeroCERT

6214 2024-01-20 18:13 univ.exe  

a0a061a95699987d3bdb7d212c8cbdd6


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 M 23 ZeroCERT

6215 2024-01-20 18:11 inte.exe  

68c58efa330393b980149c75b9f2b388


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware suspicious privilege Malicious Traffic WMI Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		1 1 1 5.4 M 48 ZeroCERT

6216 2024-01-20 18:11 sl2_29.exe  

bbe98cc2bf5ce0c0bb4fb74370e2af68


PE File PE64 VirusTotal Malware crashed 		1.4 M 30 ZeroCERT

6217 2024-01-20 18:11 build.exe  

71a607a13b3a32bb32e8ec2ea9b43fd9


Gen1 Generic Malware Malicious Library ASPack Malicious Packer UPX Antivirus Anti_VM PE File PE64 DLL OS Processor Check ftp wget VirusTotal Malware Check memory Creates executable files unpack itself 		3.0 M 31 ZeroCERT

6218 2024-01-20 18:10 univ.exe  

39d19848d11f105b8271760bcabfd79f


Emotet Generic Malware Malicious Library UPX PE32 PE File OS Processor Check CAB Creates executable files AppData folder Windows 		1 2 2 1.6 M ZeroCERT

6219 2024-01-20 18:07 SetupPowerGREPDemo.exe  

a29a203a471bcfaf00f00386bc60aee6


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 wget DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.2 M 17 ZeroCERT

6220 2024-01-20 18:06 bin.exe  

cb200521eb0a2795343b74dc489bceb6


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 52 ZeroCERT

6221 2024-01-20 18:05 sma.exe  

2c8d9825ebb93a1fb86a3adeacdf0627


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.0 20 ZeroCERT

6222 2024-01-20 18:04 Sjupttbqke.exe  

afabc3587df98b14b379e68b532c40d2


Hide_EXE PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 27 ZeroCERT

6223 2024-01-20 18:03 conhost.exe  

591dac333aff7739bf01a4c9d3e838a5


Formbook .NET framework(MSIL) AntiDebug AntiVM PE32 PE File .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		3 7 4 9.0 M 41 ZeroCERT

6224 2024-01-20 18:02 Ylcqwdizkq.exe  

3e48ec4a687a12d4da0fbcde8fe923da


Hide_EXE UPX PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 M 50 ZeroCERT

6225 2024-01-19 18:19 vimu.exe  

520050ab79ad5b13e6de5d3d7941d4d2


Malicious Packer UPX Anti_VM PE32 PE File Malware download Malware AutoRuns MachineGuid buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW IP Check Tofsee Windows RisePro ComputerName DNS crashed 		1 5 5 7.0 ZeroCERT

keyword