popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7006 2023-11-22 13:23 deepweb.exe  

7a51a34ca5ccfe6eb43ef6abc0f92d46


RedlineStealer RedLine Infostealer RedLine stealer .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 4 8.0 M 65 ZeroCERT

7007 2023-11-21 18:18 Updatе.exe  

3f6d2aa85fcd8e38412f4ab60f8f47f4


Malicious Library Malicious Packer UPX PE32 PE File OS Processor Check VirusTotal Malware AntiVM_Disk VM Disk Size Check 		1.8 33 ZeroCERT

7008 2023-11-21 18:17 htmlvb.vbs  

a106d0b5d4423dbcb1b7551cc6f011b1


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 5 2 9.0 7 ZeroCERT

7009 2023-11-21 18:17 htmlbrowserhistorydeletedbymic...  

0a869df2007f5731f95c5d84aad6bbbf


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		3 6 3 4.6 M 33 ZeroCERT

7010 2023-11-21 08:10 brandmar.exe  

a9c5d3db8ea47ab1e03cbf5a91065d24


NPKI HermeticWiper Generic Malware NSIS Suspicious_Script Malicious Library UPX Antivirus Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM Javascript_Blob PE32 PE File .NET EXE PNG Format JPEG Format OS Processor Check ZIP Format icon BMP Format VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Ransomware Windows crashed 		7.8 M 53 ZeroCERT

7011 2023-11-21 08:02 pdf.exe  

ef9428407424cc578442727f6fe3bc5e


UPX Malicious Library PWS SMTP AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 5 13.8 M 46 ZeroCERT

7012 2023-11-21 08:00 smo.exe  

d117bdd49deff0dc9c560ed4a03d3a5f


Emotet Gen1 Malicious Library UPX PE32 PE File CAB Lnk Format GIF Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Browser RisePro Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 5 7 18.4 M 42 ZeroCERT

7013 2023-11-21 08:00 jurojarem2.1.exe  

0a1d0f4a278dff187347c1544ab3dc6a


NSIS Malicious Library UPX PE32 PE File OS Processor Check Remcos VirusTotal Malware AutoRuns Malicious Traffic Check memory Creates executable files unpack itself AppData folder Windows DNS DDNS 		1 4 2 5.0 M 34 ZeroCERT

7014 2023-11-21 08:00 photo_dnkafan3.exe  

3d2fc3836a767e534bd36c889287b7c9


Emotet Gen1 Malicious Library UPX Malicious Packer PE32 PE File DLL OS Processor Check Browser Info Stealer Malware download Vidar VirusTotal Malware c&c Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser ComputerName DNS plugin 		8 1 15 6.8 M 19 ZeroCERT

7015 2023-11-21 07:57 hvupdater12.exe  

68392cd3b6d0900a123e3c474737a068


Generic Malware Malicious Library Malicious Packer Antivirus PE32 PE File VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		2 7.6 M 53 ZeroCERT

7016 2023-11-21 07:55 test20.exe  

fbd70a366b8f1c3e25e080cdd553930f


Malicious Library Malicious Packer UPX PE File PE64 Malware download NetWireRC VirusTotal Malware Malicious Traffic Check virtual network interfaces WriteConsoleW RAT DNS ChaosRAT 		3 1 4 3.8 M 16 ZeroCERT

7017 2023-11-21 07:55 build.exe  

aa90f740f20462601a90fafdf37a4b82


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware unpack itself Windows crashed 		2.6 M 30 ZeroCERT

7018 2023-11-20 09:58 conhost.exe  

0c648321522607509014810fa9850703


XMRig Miner Emotet Cryptocurrency Miner Generic Malware Suspicious_Script_Bin CoinHive Cryptocurrency task schedule Downloader Malicious Library UPX Antivirus Malicious Packer .NET framework(MSIL) Create Service Socket DGA Http API ScreenShot Escalate pri VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key 		4 3 6 13.4 M 46 ZeroCERT

7019 2023-11-20 09:58 brandrock.exe  

deb1df6e8090653848506c1e9a1e32f8


NPKI HermeticWiper Generic Malware NSIS Suspicious_Script Malicious Library UPX Antivirus Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM Javascript_Blob AntiDebug AntiVM PE32 PE File .NET EXE PNG Format JPEG Format OS Processor Check ZIP Forma Malware Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Ransomware crashed 		10.8 M ZeroCERT

7020 2023-11-20 09:56 svchost.exe  

a4212217a2e90127cf2870215d72edf5


Obsidium protector UPX PE File PE64 .NET EXE VirusTotal Malware Windows crashed 		2.6 M 44 ZeroCERT

keyword