popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6511 2024-08-19 10:50 explorer.exe  

d08504a4718a999e104aef407bb43123


HermeticWiper Gen1 Emotet PhysicalDrive Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check PDB RCE 		0.6 guest

6512 2024-08-19 10:50 WLive48x48.png  

346e52bacfe42b2d4541fcc62e9d452f


PNG Format 		guest

6513 2024-08-18 14:21 dl  

af0ebffab2ca7cffdc8a6aba7021e347


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Windows 		2.2 M 29 ZeroCERT

6514 2024-08-18 14:21 youngjuan.vbs  

4ff4cc2242c1e40ba40b21e322494800


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.6 M 2 ZeroCERT

6515 2024-08-18 14:19 Images.exe  

544fb98f86fbbbfe6adc50a62772df10


Emotet Gen1 Generic Malware Malicious Library Malicious Packer UPX Admin Tool (Sysinternals etc ...) Downloader Anti_VM AntiDebug AntiVM PE File PE32 OS Processor Check DLL .NET DLL DllRegisterServer dll VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName 		1 6 1 6.8 M 14 ZeroCERT

6516 2024-08-18 14:17 dl  

c110bf099b4b7f2591ba377488be0bf4


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Windows 		2.6 M 27 ZeroCERT

6517 2024-08-18 14:17 Channel1.exe  

c0b1bacf44892b96abd3564716a2b4ee


Generic Malware Malicious Library Malicious Packer Antivirus UPX AntiDebug AntiVM PE File PE64 OS Processor Check PowerShell PE32 VirusTotal Malware powershell AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization Tofsee Windows Discord ComputerName RCE DNS Cryptographic key 		6 12 10 5 19.4 M 11 ZeroCERT

6518 2024-08-18 14:14 3546345.exe  

fd2defc436fc7960d6501a01c91d893e


Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 Browser Info Stealer Malware download VirusTotal Malware Malicious Traffic Check memory buffers extracted unpack itself Collect installed applications suspicious TLD anti-virtualization installed browsers check CryptBot Browser ComputerName DNS 		1 2 3 6.2 M 28 ZeroCERT

6519 2024-08-18 10:30 https://lula.com.br/  


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 2 4.2 guest

6520 2024-08-18 10:30 https://pt.org.br/  


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.8 guest

6521 2024-08-18 10:28 https://casa13.pt.org.br/  


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 3.8 guest

6522 2024-08-18 10:21 https://x.com/  

1911a4b09af1e5212912f6e1115e5306


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.6 guest

6523 2024-08-18 10:17 msedge.exe  

30e74327b4f7bc2e556ac0a6d8e02dd2


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check PDB RCE 		0.6 guest

6524 2024-08-18 10:15 W10DigitalActivation_x64.iso  

89bd10832539a85ef8557b8976a38207


AntiDebug AntiVM Check memory Checks debugger unpack itself 		1.2 guest

6525 2024-08-18 10:08 L3250_L3251_Lite_LA.exe  

23b9be57494e761584989265e5a2dcf3


Emotet Gen1 Schwerer Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 MZP Format PNG Format DLL OS Processor Check JPEG Format icon PE64 Malware Malicious Traffic Check memory Checks debugger RWX flags setting unpack itself AppData folder Tofsee ComputerName DNS 		1 6 3 4.4 guest

keyword