popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6376 2024-08-20 09:44 File1.exe  

93d6175fe1726d7f201a13e359e3c3f8


Generic Malware Malicious Library Malicious Packer Antivirus UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE64 OS Processor Check PowerShell PE32 Browser Info Stealer Malware download VirusTotal Malware powershell AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs suspicious TLD WriteConsoleW anti-virtualization installed browsers check Tofsee CryptBot Windows Discord Browser ComputerName RCE DNS Cryptographic key crashed 		7 12 13 4 22.4 M 19 ZeroCERT

6377 2024-08-20 09:43 66bfee9fd7d9a_lumma.exe  

9a9953dc06ef76dfb7ef3a308340f77b


Antivirus PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.6 M 38 ZeroCERT

6378 2024-08-20 09:41 66c371f08cdcf_unins000.exe#gri...  

b698dfc0ab0130a4ba4c82ae0e972d9b


Generic Malware Malicious Library UPX PE File PE32 MZP Format OS Processor Check VirusTotal Malware unpack itself 		1.4 5 ZeroCERT

6379 2024-08-20 09:40 66c1f0aa0deee_crypted.exe#1  

52245c8ae7ec10fb61eeeb2b329e9a34


PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.8 M 56 ZeroCERT

6380 2024-08-20 09:39 StyleControls%20VCL.exe  

d4fca59c99d8d70aca5744d147e37c03


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.2 17 ZeroCERT

6381 2024-08-20 09:39 csrss.exe  

bf038a5d89d10a8c54f9173ae6f1218d


Generic Malware Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns Checks debugger Creates executable files unpack itself AppData folder Windows 		4.4 32 ZeroCERT

6382 2024-08-20 09:39 66c313b18a645_xin.exe#xin  

87842c44385a9c22e2d47b4fe85566dc


Malicious Library UPX PE File .NET EXE PE32 VirusTotal Malware PDB RCE 		2.0 M 31 ZeroCERT

6383 2024-08-20 09:32 POS_C110.exe  

86de5cffa568d6a2392d576fc6535b3b


Malicious Library UPX PE File DllRegisterServer dll PE32 MZP Format VirusTotal Malware unpack itself crashed 		2.0 10 ZeroCERT

6384 2024-08-20 09:30 POS_C028.exe  

8b2ae18d721ae95719598ca0369e94af


Malicious Library UPX PE File DllRegisterServer dll PE32 MZP Format VirusTotal Malware unpack itself crashed 		1.8 8 ZeroCERT

6385 2024-08-20 09:28 POS_C020.exe  

404d481d35148c5a12e60cba83d6d034


Malicious Library Admin Tool (Sysinternals etc ...) UPX PE File DllRegisterServer dll PE32 MZP Format VirusTotal Malware Check memory unpack itself 		1.8 8 ZeroCERT

6386 2024-08-19 15:51 66bdbedbc9eb9_ipfr.exe  

a14e062d5ddb947dd490cd3956c7de8a


Generic Malware Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		6.8 M 48 ZeroCERT

6387 2024-08-19 15:50 66c1d07f53497_doz.exe#mene  

24d5b262745b653d468c1dfdbaa2c754


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Malicious Library ASPack UPX Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 16.0 M 16 ZeroCERT

6388 2024-08-19 15:47 66bdd24d2ac1b_uninstaller.exe  

fdf999d19df6b5c6a03bdbe1990347b3


Generic Malware Malicious Library UPX PE File ftp PE32 OS Processor Check VirusTotal Malware RCE 		0.8 M 19 ZeroCERT

6389 2024-08-19 15:45 POS_C091.exe  

4542643b447f61d5b323ccb555eec06c


Malicious Library Admin Tool (Sysinternals etc ...) UPX PE File DllRegisterServer dll PE32 MZP Format VirusTotal Malware unpack itself crashed 		1.8 M 9 ZeroCERT

6390 2024-08-19 15:44 66c1c5838f95f_file1808.exe#fil...  

006edf0ac466164ddc9e0ac56474fe0a


Suspicious_Script_Bin Malicious Library Socket DGA Http API ScreenShot PWS DNS Internet API AntiDebug AntiVM PE File PE32 Malware download VirusTotal Malware Microsoft AutoRuns Code Injection Checks debugger buffers extracted unpack itself malicious URLs Tofsee Windows ComputerName DNS 		2 4 6 1 9.8 M 26 ZeroCERT

keyword