Home
Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide
2020-06-10
Version history
2020-06-10
login
popup
Submissions
10
15
20
50
Request
Connection
hash(md5,sha256)
Signature
PE API
Tag or IDS
Icon
user nickname
Date range button:
Date range picker
First seen:
Last seen:
No
Date
Request
Urls
Hosts
IDS
Rule
Score
Zero
VT
Player
Etc
6436
2024-08-19 14:44
66c0c51e57afc_666b.exe#grid
534cd669718f8448a90d0493ba2fb237
Malicious Library
.NET framework(MSIL)
UPX
PE File
.NET EXE
PE32
VirusTotal
Malware
Check memory
Checks debugger
unpack itself
2.0
M
44
ZeroCERT
6437
2024-08-19 14:43
RunGameADD.exe
c2e60013e06179236d27f81811f848df
CoinMiner
AutoIt
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Check memory
Checks debugger
2.6
M
53
ZeroCERT
6438
2024-08-19 14:42
rocket.exe
2b5a2c2d70c3c5ac3a5804ca1345a694
Generic Malware
Malicious Library
Antivirus
UPX
PE File
PE32
OS Processor Check
VirusTotal
Malware
PDB
unpack itself
RCE
2.4
M
16
ZeroCERT
6439
2024-08-19 14:41
POS_C169.exe
9eadf86f56f6423e3c952be255631746
Malicious Library
UPX
PE File
DllRegisterServer
dll
PE32
MZP Format
VirusTotal
Malware
unpack itself
crashed
1.8
M
11
ZeroCERT
6440
2024-08-19 14:40
huoronguninstall.exe
bede47f1fc4c20a850f70986399419d9
CoinMiner
AutoIt
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Check memory
Checks debugger
unpack itself
sandbox evasion
3.4
M
54
ZeroCERT
6441
2024-08-19 14:39
nubmerts.exe
bdc79de40c6138163814e9a0c2f46c8b
Generic Malware
Malicious Library
UPX
PE File
PE32
OS Processor Check
VirusTotal
Malware
PDB
Tofsee
crashed
1
Keyword trend analysis
×
Info
×
https://bitbucket.org/fcsdcvscvc/sadcasdv/raw/2e15c61641e5b6baaa704aea2c3ad1cf164da252/Fdfsfcsvvvc
2
Info
×
bitbucket.org(104.192.140.24) - malware
104.192.140.24
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
1.2
M
28
ZeroCERT
6442
2024-08-19 14:38
steamcommunityup.exe
134e67601937b96d67555408ef47111a
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Checks debugger
unpack itself
3.0
M
44
ZeroCERT
6443
2024-08-19 14:37
66b9d00589bbc_doz.exe
7e729a0eb0ab720e7b7120fd4992d084
Stealc
Client SW User Data Stealer
LokiBot
ftp Client
info stealer
Themida Packer
Antivirus
Malicious Library
ASPack
UPX
Http API
PWS
HTTP
Code injection
Internet API
AntiDebug
AntiVM
PE File
.NET EXE
PE32
OS Processor Check
FTP Client Info Stealer
VirusTotal
Malware
Telegram
Buffer PE
suspicious privilege
MachineGuid
Code Injection
Malicious Traffic
Check memory
Checks debugger
buffers extracted
WMI
unpack itself
Windows utilities
Checks Bios
Collect installed applications
Detects VMWare
suspicious process
malicious URLs
sandbox evasion
WriteConsoleW
VMware
anti-virtualization
installed browsers check
Tofsee
Windows
Browser
ComputerName
Firmware
DNS
Software
crashed
2
Keyword trend analysis
×
Info
×
https://steamcommunity.com/profiles/76561199751190313 - rule_id: 41879
https://t.me/pech0nk
5
Info
×
t.me(149.154.167.99) - mailcious
steamcommunity.com(173.222.146.99) - mailcious
149.154.167.99 - mailcious
195.201.118.191
104.71.154.102
3
Info
×
ET INFO TLS Handshake Failure
ET INFO Observed Telegram Domain (t .me in TLS SNI)
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
1
Info
×
https://steamcommunity.com/profiles/76561199751190313
20.6
M
54
ZeroCERT
6444
2024-08-19 14:36
DownYGX.exe
36f62b7cdf6f360b0eec74c5a371a102
CoinMiner
Emotet
AutoIt
Generic Malware
UPX
Malicious Library
Malicious Packer
PE File
PE32
DLL
MSOffice File
OS Processor Check
VirusTotal
Malware
suspicious privilege
Check memory
Checks debugger
Creates executable files
unpack itself
AppData folder
WriteConsoleW
Tofsee
1
Keyword trend analysis
×
Info
×
https://static.yungengxin.com/Soft/Download/Standard_x64_2021.8.15.15832.zip
2
Info
×
static.yungengxin.com(36.249.92.207)
42.177.83.87
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
5.4
M
48
ZeroCERT
6445
2024-08-19 14:35
TMS_C020.exe
2fea7433bc9da61258ef5e0856271420
Malicious Library
UPX
PE File
DllRegisterServer
dll
PE32
MZP Format
VirusTotal
Malware
unpack itself
crashed
1.8
M
11
ZeroCERT
6446
2024-08-19 14:33
DownYB.exe
e9eac28e845143c87b8d4ba752fd9124
CoinMiner
AutoIt
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Check memory
Checks debugger
unpack itself
3.0
M
53
ZeroCERT
6447
2024-08-19 14:32
rootup.exe
62a18cdbe8e50b650590b503f34fd657
CoinMiner
AutoIt
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Check memory
Checks debugger
2.6
M
53
ZeroCERT
6448
2024-08-19 14:31
Pafool.exe
34c0ec62ad1ee616d73fcc2fa7ac2c05
Generic Malware
Malicious Library
UPX
PE File
PE32
OS Processor Check
VirusTotal
Malware
PDB
Tofsee
crashed
1
Keyword trend analysis
×
Info
×
https://bitbucket.org/fcsdcvscvc/sadcasdv/raw/289495c056fb31bf0c7eabfaa90ac7dd03d83555/pozoranchik
2
Info
×
bitbucket.org(104.192.140.26) - malware
104.192.140.24
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
1.2
M
28
ZeroCERT
6449
2024-08-19 14:30
dbzinifix.exe
54fb16a53cf14d68db5111ed6530251d
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Checks debugger
2.6
M
43
ZeroCERT
6450
2024-08-19 14:29
66bddfcb52736_vidar.exe
e8e3bda68ae03ea279e5030f8431f6e9
PE File
.NET EXE
PE32
VirusTotal
Malware
PDB
Check memory
Checks debugger
unpack itself
ComputerName
2.4
M
27
ZeroCERT
First
Previous
421
422
423
424
425
426
427
428
429
430
Next
Last
Total : 53,728cnts
Delete
×
Do you want to delete it?
View
×
Insert
×
http
domains
hosts
ips
Memo
Tag
Alert
×
Insert error....
keyword