popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6556 2023-12-18 07:52 wlanext.exe  

cae0a2b2c56b394afa087d84a85e1f6b


Generic Malware Malicious Library UPX Antivirus PE32 PE File powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		6.0 M ZeroCERT

6557 2023-12-18 07:51 thursdayexploitxla.exe  

cce987d4f92698550805cd361acdab2a


.NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check Check memory Checks debugger unpack itself ComputerName 		1.0 M ZeroCERT

6558 2023-12-18 07:50 TierDiagnosis.exe  

2e600b1ff7cd82c6402bb280720ced61


Generic Malware task schedule Downloader Malicious Library Admin Tool (Sysinternals etc ...) UPX KeyLogger Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Windows ComputerName 		1 11.8 M 48 ZeroCERT

6559 2023-12-18 07:50 wlanext.exe  

d28a7016ca5651a4a4a270883792ebb7


Generic Malware Malicious Library UPX Antivirus PE32 PE File powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		5.4 M ZeroCERT

6560 2023-12-15 19:04 adobe.exe  

f74eaaf7cee624885219e992887a1689


Emotet Gen1 Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE32 PE File MZP Format DLL OS Processor Check DllRegisterServer dll PE64 wget ZIP Format Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName crashed 		4.2 ZeroCERT

6561 2023-12-15 19:03 setup294.exe  

c83e00b6e41e1a56fc6908e165ab4cb5


Malicious Library UPX AntiDebug AntiVM PE32 PE File DLL OS Processor Check Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder 		4.0 ZeroCERT

6562 2023-12-15 19:00 2.exe  

f89eaa7fbb0a8b2e24ad2671d833b15f


Malicious Library VMProtect PE32 PE File Remote Code Execution crashed 		1.8 ZeroCERT

6563 2023-12-15 18:22 Delivery_Data.jar  

eea444443394d25856661dc1cfbbff20


Malicious Library MSOffice File VirusTotal Malware Check memory heapspray unpack itself Java 		2.4 M 20 ZeroCERT

6564 2023-12-15 18:20 svchost.exe  

d973e5134f0a64365f35d158d23c4ba1


Malicious Packer Antivirus .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger RWX flags setting unpack itself 		2.8 M 36 ZeroCERT

6565 2023-12-15 18:18 DNS1.exe  

6a23b6e2536f7027a8506c87245eea5d


PE32 PE File VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Creates executable files unpack itself suspicious TLD Windows DNS 		2 6 4 6.4 M 59 ZeroCERT

6566 2023-12-15 18:16 Dvvyjoogg.exe  

4a9119576c02d6707f5914f5ea020730


PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.4 M 32 ZeroCERT

6567 2023-12-15 18:16 tSV0dUC1pYGjOvI.exe  

f0b67e5a152e990ffc32d8364da1c8b2


PE32 PE File .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key crashed 		5.0 M 29 ZeroCERT

6568 2023-12-15 17:45 Voice-Ai-beta.exe  

db24ccd5edd193c3de7e8324af4df458


Gen1 Malicious Library UPX Malicious Packer Anti_VM PE File PE64 OS Processor Check DLL PNG Format ZIP Format icon VirusTotal Malware Check memory Creates executable files Ransomware 		2.6 18 ZeroCERT

6569 2023-12-15 17:45 release.rar  

57ab5e01e6e92d13ae33e587004ad918


Stealc PrivateLoader Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Vidar Glupteba Open Directory Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Exploit Browser RisePro DNS Downloader plugin 		62 75 62 12 7.6 M ZeroCERT

6570 2023-12-15 16:22 128.5.14-package.hta  

715d2502c51eddfd399a63042a259634


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 ZeroCERT

keyword