popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6496 2023-12-22 08:08 rest.exe  

7e267bec235e3a97a82cbc14780e5af1


Themida Packer Malicious Library Admin Tool (Sysinternals etc ...) UPX Anti_VM AntiDebug AntiVM PE32 PE File .NET EXE OS Processor Check PNG Format ZIP Format MSOffice File DLL JPEG Format Lnk Format GIF Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces suspicious process AppData folder VMware anti-virtualization IP Check installed browsers check Tofsee Ransomware Windows Exploit Browser RisePro Email ComputerName Firmware DNS Cryptographic key Software crashed 		2 6 7 20.0 54 ZeroCERT

6497 2023-12-22 08:08 setup294.exe  

036f715ce0e23c5993a9fbb138eaeffb


Malicious Library AntiDebug AntiVM PE32 PE File DLL Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder DNS 		1 4.2 ZeroCERT

6498 2023-12-21 17:09 file.rar  

6b0f8a62bc4fec439739c021445942f5


Stealc Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Open Directory Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Exploit RisePro DNS 		52 62 35 5 5.2 M guest

6499 2023-12-21 08:06 Pcpkjc.exe  

25bbcd3deb0ac8de0822a74f9d91b989


Hide_EXE AntiDebug AntiVM PE File PE64 .NET EXE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		6.6 M ZeroCERT

6500 2023-12-21 08:03 spfasiazx.exe  

aba50ae31c5df3ea0c2394c93d423afe


Formbook PE32 PE File .NET EXE PDB Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		1.6 M ZeroCERT

6501 2023-12-21 08:01 alphazx.exe  

1938e1ce8ff0107d18ae1972302d0060


Formbook PE32 PE File .NET EXE PDB Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 3.6 ZeroCERT

6502 2023-12-21 08:01 Mhgskyufhic.exe  

e5d75255dac28cd11b130b6471b258ee


Hide_EXE UPX PE File PE64 OS Processor Check Check memory Checks debugger unpack itself 		1.2 ZeroCERT

6503 2023-12-21 07:59 Microsoftdigitalwallettechnolo...  

f306b23f34ca0c9d62c74d45f399d21a


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Windows Exploit DNS crashed 		1 3 7 3.6 M ZeroCERT

6504 2023-12-21 07:59 Microsofttechnologyunavailable...  

70e00aa467b51abaa54b560b0d399010


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		1 3 5 3.6 M ZeroCERT

6505 2023-12-20 23:29 https://www.luxuryshield.org/?...  


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		3 2 2 4.2 guest

6506 2023-12-20 08:03 sd4.ps1  

16eedcc3da8cc730941c9a2f4adaaf7a


Generic Malware Antivirus Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 4.4 ZeroCERT

6507 2023-12-20 08:01 wlanext.exe  

c810e663dd2ada28c1bb8ee928f1372f


Generic Malware Malicious Library UPX Antivirus PE32 PE File powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key crashed 		3 6.0 M ZeroCERT

6508 2023-12-20 08:01 sd2.ps1  

b4127347d3d08d1a466289b2071e81e7


Generic Malware Antivirus Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 4.4 ZeroCERT

6509 2023-12-20 07:59 Voiceaibeta-5.13.exe  

ce3cce902aecf173e8899da746b45dc3


Gen1 Malicious Library UPX Malicious Packer Anti_VM PE File PE64 ftp OS Processor Check DLL PNG Format ZIP Format icon Malware Check memory Creates executable files Ransomware 		2.0 M ZeroCERT

6510 2023-12-20 07:59 helper.exe  

07bf5c0cec29332eaee4559712044afa


Generic Malware Malicious Library UPX Antivirus PE32 PE File OS Processor Check PowerShell Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows Browser Advertising ComputerName DNS Cryptographic key 		1 1 1 5.8 M ZeroCERT

keyword