popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6886 2023-11-29 16:00 file_ver_9.rar  

0626f8e71d8a91fd6185df77a50b9fbc


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Vidar Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro DNS plugin 		36 46 49 3 6.6 M ZeroCERT

6887 2023-11-29 14:38 maxziflowzx.exe  

5393d9e3a30269ebfed5456bf1304e92


.NET framework(MSIL) AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself AppData folder Browser DNS 		18 26 2 11.0 M 20 ZeroCERT

6888 2023-11-29 14:33 123.exe  

5ab89a96be7570dfe4f49e6b9a42bc88


Malicious Library UPX PE32 PE File MZP Format OS Processor Check JPEG Format DLL VirusTotal Malware AutoRuns Creates executable files unpack itself AppData folder Tofsee Windows Advertising Google ComputerName DNS DDNS crashed keylogger 		2 8 4 9.6 M 67 ZeroCERT

6889 2023-11-29 14:33 clip.dll  

4194e9b8b694b1e9b672c36f0d868e32


Amadey Malicious Library UPX PE32 PE File DLL OS Processor Check VirusTotal Malware PDB Malicious Traffic Checks debugger unpack itself suspicious TLD 		1 4 3.6 M 53 ZeroCERT

6890 2023-11-29 14:33 index.php  

b13eac66431fb3332fae4527ab1b0e2e


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		1.6 M 33 ZeroCERT

6891 2023-11-29 14:30 supstrim.exe  

eace63ea1948f012941dd4a9b3ac3c94


AntiDebug AntiVM PE File PE64 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.8 M 49 ZeroCERT

6892 2023-11-29 14:30 microsoftdeletedEdgehistorycac...  

45cc2f78479e7eb29a063a5034a962c5


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		18 18 7 4.8 M 28 ZeroCERT

6893 2023-11-29 14:28 O.ini  

15909167c6a125757e0a931c7c486269


Emotet AgentTesla Malicious Library Malicious Packer UPX PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 5.4 M 49 ZeroCERT

6894 2023-11-29 14:26 strim.exe  

0d1e3266a1bc3b62f0523e10b5170337


PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 M 46 ZeroCERT

6895 2023-11-29 14:24 Klkypmnqw.exe  

6c9f3e248382f389d17d308ad5350d6d


AntiDebug AntiVM PE File PE64 .NET EXE VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key 		8.6 M 45 ZeroCERT

6896 2023-11-29 14:23 microsoftEdgedeletedentirehist...  

ad19c30e8fc0f89004a1f960b477707f


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed 		1 1 1 4.6 M 36 ZeroCERT

6897 2023-11-29 11:27 wlanext.exe  

eb951bc883b87a58ffa82ab793d7e4b0


.NET framework(MSIL) PWS AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder suspicious TLD Browser ComputerName DNS 		22 18 2 11.2 M 43 ZeroCERT

6898 2023-11-29 11:25 build.exe  

69a2817a41b97ee8f1917646723312bf


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 30 ZeroCERT

6899 2023-11-29 11:25 wlanext.exe  

09b88ab4bf59c36094bafec7a32bafed


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser ComputerName DNS 		16 24 5 12 10.6 M 35 ZeroCERT

6900 2023-11-29 11:23 wininit.exe  

8ec1ce0895188a09e0f43d999cf34cac


PE32 PE File .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key 		2.6 M 38 ZeroCERT

keyword