popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6541 2024-08-17 23:14 Configure.xml  

a163ce14405a6eed5ec4bfbef078e5b6


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

6542 2024-08-17 23:13 cleanospp.exe  

d3467cb7b83b654c2d05407dc7ba2360


Generic Malware Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE64 PDB Check memory unpack itself 		1.2 guest

6543 2024-08-17 23:13 msvcr100.dll  

df3ca8d16bded6a54977b30e66864d33


Gen1 Generic Malware Malicious Library UPX PE File DLL PE64 OS Processor Check PDB 		0.4 guest

6544 2024-08-17 23:10 cleanospp.exe  

98821a7a5737d656633d10a3afb724bd


Generic Malware Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 PDB Check memory unpack itself WriteConsoleW 		1.4 guest

6545 2024-08-17 23:10 msvcr100.dll  

bf38660a9125935658cfa3e53fdc7d65


Gen1 Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check PDB 		0.6 guest

6546 2024-08-17 23:10 msvcr100.dll  

df3ca8d16bded6a54977b30e66864d33


Gen1 Generic Malware Malicious Library UPX PE File DLL PE64 OS Processor Check PDB 		0.4 guest

6547 2024-08-17 23:09 cleanospp.exe  

d3467cb7b83b654c2d05407dc7ba2360


Generic Malware Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE File PE64 PDB unpack itself 		1.0 guest

6548 2024-08-17 23:00 DNSBench.exe  

04177f89fa23b9d6fec146d9be737566


UPX PE File PE32 Malware download VirusTotal Malware Checks debugger unpack itself Check virtual network interfaces Tofsee GameoverP2P Zeus DNS crashed 		2 590 2 3.6 4 guest

6549 2024-08-17 22:39 SVC.exe  

e97f5c3efb2cc80e001129383d5a0132


Malicious Library PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger ICMP traffic unpack itself Check virtual network interfaces Windows ComputerName Cryptographic key 		3.6 M 13 ZeroCERT

6550 2024-08-17 22:37 Identifications.exe  

edcf274c5fb6582593f81ecc977264e9


Emotet Malicious Library Admin Tool (Sysinternals etc ...) UPX PE File PE64 MZP Format OS Processor Check VirusTotal Malware unpack itself 		2.0 M 31 ZeroCERT

6551 2024-08-17 22:34 PctOccurred.exe  

31f04226973fdade2e7232918f11e5da


Generic Malware Downloader Malicious Library UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName 		7.0 M 39 ZeroCERT

6552 2024-08-17 22:34 d204.dll  

b9a842469a9ef4ad634afd464133d43b


Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware Check memory unpack itself ComputerName crashed 		2.2 M 48 ZeroCERT

6553 2024-08-17 22:33 mobiletrans.exe  

c8af5b81b11f3db6cb5b7efab33d11ef


Generic Malware Malicious Library Malicious Packer UPX Anti_VM PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware 		1 0.8 M 26 ZeroCERT

6554 2024-08-17 22:32 scheduledllama.exe  

46aa8f5fe3d5af96f0a970a8f4df625d


RedLine Infostealer RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		2 5.2 M 65 ZeroCERT

6555 2024-08-17 22:30 leon.exe  

962f3de7b7ee4a08179142efffa50372


Stealc Gen1 Generic Malware Malicious Library UPX Admin Tool (Sysinternals etc ...) Antivirus Malicious Packer PE File PE32 DLL OS Processor Check .NET EXE Browser Info Stealer Malware download Amadey FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c AutoRuns Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare AppData folder sandbox evasion VMware anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		13 4 20 5 15.0 M 37 ZeroCERT

keyword