popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6256 2024-01-17 14:23 beautifulhjcreversehissettings...  

32cd555afefc1df79dbb6e71beb05070


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		4 7 6 4.6 M 31 ZeroCERT

6257 2024-01-17 14:21 msworldwidenamespreadingaround...  

34ac6f63ff7a32a51e98db3c21fd7b1c


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		1 3 9 5.0 M 31 ZeroCERT

6258 2024-01-17 08:25 2.3.1.1.exe  

7fbe056c414472cc2fcc6362bb66d212


Malicious Library PE32 PE File VirusTotal Malware MachineGuid DNS 		1 3.0 M 53 ZeroCERT

6259 2024-01-17 08:24 liva.exe  

fb987f700ecaba1d1bced04a45c572e8


Generic Malware EnigmaProtector Malicious Library Malicious Packer UPX Code injection AntiDebug AntiVM PE32 PE File OS Processor Check MSOffice File PNG Format ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Exploit Browser RisePro Email ComputerName DNS Software crashed Downloader 		20 16 12 19.6 M 45 ZeroCERT

6260 2024-01-17 08:23 conhost.exe  

431b955c96a65b12587361ef1e961c2b


AgentTesla Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 15.0 M 32 ZeroCERT

6261 2024-01-17 08:21 RdpService.exe  

1ca12d5e34d1c83ba78ad081276d53b2


Malicious Library Malicious Packer Antivirus UPX PE File PE64 ftp OS Processor Check VirusTotal Malware suspicious privilege Check memory crashed 		2.2 M 23 ZeroCERT

6262 2024-01-17 08:19 sl2_27.exe  

d1b1e876ea20b2e18911e8e4981f2858


PE File PE64 VirusTotal Malware DNS crashed 		1 1.8 M 22 ZeroCERT

6263 2024-01-17 08:18 build3.exe  

41b883a061c95e9b9cb17d4ca50de770


[m] Generic Malware task schedule Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself Windows utilities WriteConsoleW Windows ComputerName 		8.0 M 62 ZeroCERT

6264 2024-01-17 08:16 conhost.exe  

be3c89dc0d88fddd3289ac9e6e72360a


AgentTesla .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 12.0 M 44 ZeroCERT

6265 2024-01-17 08:16 zona.exe  

25ad333f2ccbfef09ac64bf488bfc5d8


EnigmaProtector Malicious Packer UPX PE32 PE File unpack itself DNS crashed 		1 1.8 M ZeroCERT

6266 2024-01-17 08:14 rty27.exe  

34a7dbf9c978714dd0679079c5445a10


Malicious Packer PE File PE64 VirusTotal Malware PDB MachineGuid unpack itself Check virtual network interfaces Tofsee Remote Code Execution 		2 3 1 3.4 35 ZeroCERT

6267 2024-01-17 08:14 dnjupddater.exe  

c185fbe98786544b6f15036ba2ab7318


Hide_EXE UPX AntiDebug AntiVM PE File PE64 .NET EXE OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.8 M 38 ZeroCERT

6268 2024-01-17 08:14 latestrocki.exe  

51a977874c9b190837bc2658396d4dfe


Generic Malware NSIS Malicious Library UPX Antivirus Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM PE32 PE File .NET EXE PNG Format OS Processor Check PE64 ZIP Format MZP Format JPEG Format BMP Format CHM Format DLL icon CAB MSOffice File W VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS crashed 		4 5 5 2 13.6 M 48 ZeroCERT

6269 2024-01-17 08:11 Zxgdah.exe  

54276714de008467235d06f590be7b1a


Hide_EXE UPX PE File PE64 OS Processor Check VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.6 M 41 ZeroCERT

6270 2024-01-17 08:10 rty45.exe  

02550318e655f52fa990158a1c709cef


Malicious Packer PE File PE64 VirusTotal Malware PDB MachineGuid unpack itself Check virtual network interfaces Tofsee Remote Code Execution DNS 		2 4 1 4.2 41 ZeroCERT

keyword