popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7201 2023-11-07 19:12 StealerClient_Sharp.exe  

344e9762e1477db04edfecaa07cef091


Malicious Library UPX Malicious Packer .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check Check memory Checks debugger unpack itself ComputerName Remote Code Execution 		1.2 M ZeroCERT

7202 2023-11-07 19:09 toolspub4.exe  

ba07981c0db641512c0004aac1654895


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check Malware Code Injection Checks debugger buffers extracted unpack itself 		5.8 M ZeroCERT

7203 2023-11-07 19:08 a.exe  

248fdd80b574b1379fe4f6f1cee40091


email stealer Downloader .NET framework(MSIL) Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Code injection persistence KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs WriteConsoleW Windows DNS 		1 10.8 M ZeroCERT

7204 2023-11-07 19:07 StealerClient_Cpp.exe  

0e149c713146c9c1ea53d7b7fa3b39e1


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check 		M ZeroCERT

7205 2023-11-07 19:05 Juderk.exe  

3f47913af364115da3a560edb88035ae


Themida Packer Malicious Library Anti_VM PE File PE32 .NET EXE Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Stealer Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 5 8.4 M ZeroCERT

7206 2023-11-07 19:05 xoIBL6LAISDs.exe  

eb29546aff8b06616b7b226986fd7827


Browser Login Data Stealer Generic Malware Malicious Library UPX Malicious Packer Downloader PE File PE32 OS Processor Check Windows DNS keylogger 		1 2.8 ZeroCERT

7207 2023-11-07 15:02 CVE 2001-0241.pcap  

aa96f5eaeb8f04a7e6fc1f1cb455d195


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

7208 2023-11-07 11:30 tuc19.exe  

a8c3b73f59bdf41eb250cba92fa934f1


Gen1 Emotet Generic Malware Malicious Library UPX Confuser .NET Malicious Packer PE File PE32 MZP Format DLL OS Processor Check CHM Format PE64 DllRegisterServer dll suspicious privilege Checks debugger Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows ComputerName crashed 		4.0 M ZeroCERT

7209 2023-11-07 11:30 tuc19.exe  

63b908a7f395bb899f1d4afbbc472d1e


Gen1 Emotet Generic Malware Malicious Library UPX Confuser .NET Malicious Packer PE File PE32 MZP Format DLL OS Processor Check CHM Format PE64 DllRegisterServer dll suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows ComputerName crashed 		4.2 M ZeroCERT

7210 2023-11-07 11:24 setup294.exe  

a05ee0fea78a297e1a4182ce9d5cd8a4


Malicious Library AntiDebug AntiVM PE File PE32 DLL Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder 		4.0 ZeroCERT

7211 2023-11-07 11:03 syncUpd.exe  

a1fd31c9149678ba7c05e3adad8ac568


Malicious Library UPX PE File PE32 OS Processor Check unpack itself 		0.8 ZeroCERT

7212 2023-11-07 10:59 File.rar  

f990fd3d664b4a2cd89a21cb6e2a9911


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware c&c Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Browser RisePro DNS Downloader plugin 		62 93 57 10 7.2 M ZeroCERT

7213 2023-11-07 10:13 bRoC.exe  

07807c652283c997837c931b41c45f24


PE File PE32 .NET EXE VirusTotal Malware Tofsee 		1 3 1 1.6 53 ZeroCERT

7214 2023-11-07 10:12 aww.exe  

3d74ec695d023d5a66cb239354445734


Malicious Library Malicious Packer PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 6.4 M 48 ZeroCERT

7215 2023-11-07 10:12 Runtime.exe  

bcbbef1fa9490ce2337f1bd74480e428


PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 23 ZeroCERT

keyword