popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6931 2023-11-28 09:23 htmljason.vbs  

e64be178e12b020963cc38980edc18f8


VirusTotal Malware wscript.exe payload download Tofsee 		1 2 2 2.8 M 16 ZeroCERT

6932 2023-11-28 09:21 wlanext.exe  

9aeed55e2703a03cf9e922dc695db1ab


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser ComputerName DNS 		16 24 5 12 10.6 M 31 ZeroCERT

6933 2023-11-28 09:21 MicrosoftbrowserEdgeentierhist...  

1363064ab295a3d2cb98232cc188eb42


Formbook MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware RWX flags setting exploit crash Windows Exploit DNS crashed 		16 10 14 3.4 M 34 ZeroCERT

6934 2023-11-28 09:21 InstallSetup2.exe  

631a53494c133f38982b1c8e73f1a42c


PE32 PE File .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.2 M 35 ZeroCERT

6935 2023-11-28 09:21 microsoftdeltedentirefileschac...  

880f0c9bc44adc32f0cab0a386d338ee


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit crashed 		3.2 M 30 ZeroCERT

6936 2023-11-27 10:05 a.ps1  

d80666f445b6a86fbf383d69186a2cae


Generic Malware Antivirus VirusTotal Malware Check memory Creates executable files unpack itself Windows DNS Cryptographic key 		2.4 10 ZeroCERT

6937 2023-11-27 10:02 traff.html  

1741302811bd4ccf06fe466aa79a7c4f


Suspicious_Script_Bin AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 ZeroCERT

6938 2023-11-27 09:39 balotek2.1.exe  

cf52e32f7257ad06e9436c2090585f55


NSIS Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		4 8 1 4.2 M 48 ZeroCERT

6939 2023-11-27 09:38 UnityLibManager.exe  

1cf04f58323fc1139560daee9b3d1831


Gen1 RedLine stealer NSIS Downloader Generic Malware Malicious Library UPX Malicious Packer Javascript_Blob Anti_VM PE32 PE File ftp DLL PE64 OS Processor Check MSOffice File VirusTotal Malware suspicious privilege Check memory Checks debugger Creates executable files RWX flags setting unpack itself Check virtual network interfaces AppData folder IP Check Ransomware crashed 		1 6.2 1 ZeroCERT

6940 2023-11-27 09:38 amd.exe  

f4ba796f39305262e65d0ebd9d0ee33e


Amadey Themida Packer Malicious Library UPX Admin Tool (Sysinternals etc ...) .NET framework(MSIL) PWS Anti_VM AntiDebug AntiVM PE32 PE File DLL OS Processor Check .NET EXE Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare Check virtual network interfaces suspicious process AppData folder WriteConsoleW VMware anti-virtualization installed browsers check SectopRAT Windows Browser Backdoor ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed Downloader 		2 5 7 1 23.8 M 60 ZeroCERT

6941 2023-11-27 09:36 PsExec.exe  

9f26f723df0ce1ad3e928f983dffc61e


Malicious Library .NET framework(MSIL) UPX PE32 PE File MZP Format JPEG Format DLL .NET EXE VirusTotal Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself AppData folder Tofsee Windows Advertising Google ComputerName DNS DDNS crashed keylogger 		1 7 2 8.8 M 63 ZeroCERT

6942 2023-11-27 09:34 windows_amd64.exe  

42da12e3d8a9fc15574df76234e52b57


UPX PE File PE64 VirusTotal Malware Check virtual network interfaces DNS 		1 1 3.6 M 41 ZeroCERT

6943 2023-11-27 09:33 client.exe  

0170f9a9cf779fefa88e3a93dd551712


Malicious Library Malicious Packer Antivirus UPX PE File PE64 ftp OS Processor Check WriteConsoleW 		1.4 M ZeroCERT

6944 2023-11-27 09:31 updater.exe  

2ef140966b38a9c3025a123423e36667


Gen1 RedLine stealer NSIS Downloader Generic Malware Malicious Library UPX Malicious Packer Anti_VM Javascript_Blob PE32 PE File ftp DLL OS Processor Check PE64 MSOffice File VirusTotal Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder Ransomware 		3.2 3 ZeroCERT

6945 2023-11-27 09:30 hv.exe  

36bd43b2792ce1ea475f91074eb2ef61


Admin Tool (Sysinternals etc ...) .NET framework(MSIL) UPX Malicious Library PE32 PE File .NET EXE DLL OS Processor Check VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Windows Cryptographic key crashed 		8.2 15 ZeroCERT

keyword