popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7081 2023-11-16 13:28 build.exe  

af3b051d8a6a33705bd095b6d5608355


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 33 ZeroCERT

7082 2023-11-16 13:27 unsecapp.exe  

7630a755b70921f9f22891035c3628e9


Malicious Library PE32 PE File Browser Info Stealer VirusTotal Malware unpack itself AppData folder suspicious TLD Browser DNS 		21 32 5 4.0 M 54 ZeroCERT

7083 2023-11-16 13:26 ama.exe  

501fa03f6abac7f44696927b21cfefb5


Amadey Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware AutoRuns Malicious Traffic Check memory RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		1 1 1 8.2 M 51 ZeroCERT

7084 2023-11-16 13:23 traffico.exe  

461b8083838b2d837b19466b5acce0e4


Malicious Library Malicious Packer PE32 PE File Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 6.2 M 49 ZeroCERT

7085 2023-11-16 07:56 ama.exe  

a61aac13f8a4841915791fb57aa2e275


Amadey UPX PE32 PE File Malware download Amadey Malware AutoRuns Malicious Traffic Check memory RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS 		1 4 2 1 7.8 M ZeroCERT

7086 2023-11-16 07:54 crypted.exe  

8ddb35a58ac6c397b91541620a493008


Malicious Library UPX PE32 PE File OS Processor Check PDB 		0.6 M ZeroCERT

7087 2023-11-16 07:53 unsecapp.exe  

10becade76ccb8cbe488fddc823f7fbf


.NET framework(MSIL) UPX PWS SMTP AntiDebug AntiVM PE32 PE File .NET EXE OS Processor Check Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AppData folder Windows DNS Cryptographic key 		1 1 5 11.8 M ZeroCERT

7088 2023-11-16 07:51 smss.exe  

318e2272187798dbd04f0b228e2ca756


Malicious Library UPX PE32 PE File MZP Format DllRegisterServer dll unpack itself crashed 		1.4 ZeroCERT

7089 2023-11-16 07:49 open.exe  

16252016f9922916b06ba87604aaaa29


AgentTesla .NET framework(MSIL) UPX PWS KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 4 14.4 M ZeroCERT

7090 2023-11-16 07:49 amday.exe  

6800e6fa797f5cf412770d6fb47d81bc


Admin Tool (Sysinternals etc ...) .NET framework(MSIL) UPX Http API HTTP Code injection Internet API AntiDebug AntiVM PE32 PE File .NET EXE Lnk Format GIF Format AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Windows ComputerName DNS 		1 11.2 M ZeroCERT

7091 2023-11-15 10:50 pwng.ps1  

a882757ac81f77747ab828a4b3e25e34


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.4 7 ZeroCERT

7092 2023-11-15 10:49 Agenzia_Entrate.url  

67b426814bf2530e2de2e85d1146c594


AntiDebug AntiVM URL Format MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.4 ZeroCERT

7093 2023-11-15 10:49 Agenzia.url  

e8e03b91b2802891c978c8a67999bd10


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 6 ZeroCERT

7094 2023-11-15 10:48 df4e69db.exe  

c48c58d873eacde201d14af9cad50e81


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware unpack itself Windows crashed 		2.4 M 29 ZeroCERT

7095 2023-11-15 10:15 ace.jpg.ps1  

297f46ad29a838b1d721d7c0b118678b


Generic Malware Antivirus PE32 PE File DLL .NET DLL Malware download VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW PurpleFox Windows ComputerName Cryptographic key 		4 2 2 2 10.2 M 10 ZeroCERT

keyword