popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6961 2023-11-26 13:40 sihost.exe  

8a7ee9dbd620232871c7ce897fcb14e9


PE32 PE File .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 53 ZeroCERT

6962 2023-11-26 13:40 asusns.exe  

e59325a169b1a80fd0525ea86e130ff8


Formbook AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder suspicious TLD Browser DNS 		19 5 18 9.6 M 43 ZeroCERT

6963 2023-11-26 13:39 update.exe  

4a657cf9c1289e3df987268e32961a66


Generic Malware Malicious Library Antivirus UPX Malicious Packer PE32 PE File CAB OS Processor Check DLL MSOffice File DllRegisterServer dll Malware download VirusTotal Malware Buffer PE PDB suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check BumbleBee ComputerName DNS 		20 2 5.2 M 5 ZeroCERT

6964 2023-11-26 13:38 test.exe  

3630b92ac5ed33de5eb53b563913bb02


Malicious Library .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 62 ZeroCERT

6965 2023-11-26 13:37 syncUpd.exe  

cbea2e95a6df177f26b684090c1d28db


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		1.4 M 29 ZeroCERT

6966 2023-11-26 13:36 vsc.exe  

bf552178396e2c988549aed62e1e3221


Gen1 Generic Malware Malicious Library UPX PE File PE64 OS Processor Check DLL ZIP Format VirusTotal Malware Check memory Creates executable files Windows utilities Windows crashed 		2.6 M 46 ZeroCERT

6967 2023-11-26 13:35 obizx.doc  

a486b5b3452cc0b67c8c8d3ec919e141


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself suspicious TLD IP Check Tofsee Windows Exploit DNS crashed 		1 4 9 4.0 M 30 ZeroCERT

6968 2023-11-25 18:19 sservc.exe  

4f17e0e8d7f6931d86bcef776619a2b5


Hide_EXE Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces suspicious TLD sandbox evasion Windows Tor ComputerName DNS 		82 252 9 14.0 M 35 ZeroCERT

6969 2023-11-25 18:14 plugmanzx.exe  

980746bbc209911ddbaaff46d856a78f


.NET framework(MSIL) PWS DNS AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 14.4 M 48 ZeroCERT

6970 2023-11-25 18:13 Kolodi.exe  

110420eeb8d1004a45bca1a06e214705


Themida Packer UPX PE32 PE File .NET EXE Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Stealer Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 5 8.4 M ZeroCERT

6971 2023-11-25 18:13 Opesi.exe  

51367ff68633e00c8a084cb52534182f


Client SW User Data Stealer LokiBot ftp Client info stealer .NET framework(MSIL) Http API PWS AntiDebug AntiVM PE32 PE File .NET EXE FTP Client Info Stealer Malware Telegram suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software 		1 5 3 16.0 M ZeroCERT

6972 2023-11-25 18:10 fortune.exe  

081ecd14cc7bc4c72d2ba701f3d6dfcc


.NET framework(MSIL) UPX Malicious Library Http API ScreenShot AntiDebug AntiVM PE32 PE File .NET EXE DLL OS Processor Check Browser Info Stealer Malware download Malware Cryptocurrency wallets Cryptocurrency PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder suspicious TLD sandbox evasion installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		1 2 4 13.6 M ZeroCERT

6973 2023-11-25 18:10 Wlssejinnvz.exe  

b4ce50927cd3a7ab60d2d6522070cd69


AntiDebug AntiVM PE File PE64 suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key 		1 8.0 M ZeroCERT

6974 2023-11-25 18:09 updater.exe  

8589b564a5ed7920be4b1b08f3d6d8ed


Gen1 Generic Malware UPX Antivirus Malicious Library PE32 PE File DLL PE64 OS Processor Check ZIP Format Cryptocurrency Miner Malware Cryptocurrency suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName intelligence DNS Cryptographic key crashed CoinMiner 		1 7 4 6.2 M ZeroCERT

6975 2023-11-25 18:08 timeSync.exe  

4406e9c6faab7ab95c4e0550d7756dbc


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 32 ZeroCERT

keyword