popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6931 2024-08-11 15:12 66b7a2aef1283_doz.exe#mene  

eb47857a107cd0ebf986c08be274bd2e


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Generic Malware Malicious Library .NET framework(MSIL) UPX ASPack Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 16.0 M 11 ZeroCERT

6932 2024-08-11 15:10 svch0st.exe  

5575d0030528b163ac14ebe51ebd7da9


Malicious Library PE File PE32 Malware download Cobalt Strike Cobalt VirusTotal Malware Malicious Traffic RWX flags setting unpack itself ComputerName DNS 		1 1 2 4.0 M 59 ZeroCERT

6933 2024-08-11 15:09 pink.exe  

4e0a6df4069761feb9f073276d52847c


Antivirus UPX Anti_VM PE File PE64 OS Processor Check VirusTotal Malware 		1.0 M 36 ZeroCERT

6934 2024-08-11 15:08 request.exe  

ef8320eace6f753231666c61104bdd49


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Email Client Info Stealer Malware AutoRuns Checks debugger WMI Windows utilities suspicious process WriteConsoleW Tofsee Windows Email ComputerName DNS 		2 3 5.2 M 31 ZeroCERT

6935 2024-08-11 15:07 tt111.exe  

6f09bbce72130d28fbb011ef4dc89668


Malicious Library Antivirus UPX PE File PE64 OS Processor Check VirusTotal Malware PDB 		1.0 M 27 ZeroCERT

6936 2024-08-11 15:06 66b7d3a2e7a4d_deepweb.exe#5k  

4f1b08b2de97134ea899bede6f28098e


RedLine stealer PWS AntiDebug AntiVM BitCoin PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 5 14.6 M 21 ZeroCERT

6937 2024-08-11 15:05 Factura%20Pro-forma%20-%20S083...  

66da887500b1a6ce357adfafb8a10d07


PDF Suspicious Link PDF 		M ZeroCERT

6938 2024-08-11 15:05 blued2.exe  

444227bb8425c40230c70a0312b34d9e


Malicious Library Antivirus UPX Anti_VM PE File PE64 OS Processor Check VirusTotal Malware DNS 		1 1.4 M 25 ZeroCERT

6939 2024-08-11 15:04 66af9bdbf0f60_Team.exe  

2f208b17f8bda673f6b4f0dacf43d1bf


Malicious Library UPX PE File PE64 MZP Format OS Processor Check VirusTotal Malware unpack itself 		2.2 M 43 ZeroCERT

6940 2024-08-11 15:03 newalp.exe  

6093bb59e7707afe20ca2d9b80327b49


Generic Malware Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check PE64 Malware download Amadey VirusTotal Cryptocurrency Miner Malware AutoRuns Malicious Traffic Creates executable files unpack itself AppData folder Windows DNS CoinMiner 		3 9 9 6.6 M 64 ZeroCERT

6941 2024-08-11 15:01 NJTCFVIV.exe  

c350fa7b1a8b9cbbab1ae59e00575209


Generic Malware Malicious Library UPX Malicious Packer PE File PE32 DLL PE64 OS Processor Check VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AntiVM_Disk VM Disk Size Check 		3.6 M 34 ZeroCERT

6942 2024-08-11 15:01 tt2.exe  

ae136ee998229f2898b20cc44cf2bc99


Malicious Library Antivirus UPX Anti_VM PE File PE64 OS Processor Check VirusTotal Malware 		1.2 M 41 ZeroCERT

6943 2024-08-11 14:59 06082025.exe  

0d76d08b0f0a404604e7de4d28010abc


RedLine stealer RedlineStealer Generic Malware Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check PE64 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 5 7 10.4 M 62 ZeroCERT

6944 2024-08-11 14:58 66ae97ac4c30d_crypted.exe  

dbfb97dfac2ebd1c0c891897dee558a3


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself crashed 		2.4 M 58 ZeroCERT

6945 2024-08-11 14:57 sthealthclient.exe  

5a49dfb1f8484d86675a3811e95c5020


RedLine Infostealer UltraVNC Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder Windows DNS Cryptographic key crashed 		2 1 4 7.6 M 44 ZeroCERT

keyword