popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7216 2023-11-07 09:52 SFT.zip  

882e1e40bd642dac255ec144e37e06d0


ZIP Format Malware Malicious Traffic DNS 		2 3 2 1.4 guest

7217 2023-11-07 09:46 EHSU.zip  

056f1e5e64d6246b96f5fa6b3322f3e1


ZIP Format Malware Malicious Traffic DNS 		2 3 2 1.4 guest

7218 2023-11-07 09:22 owenzx.exe  

8311a1beb1bde04ce733fba1f436bad6


Formbook PWS AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		1 3 1 1 9.0 M 24 ZeroCERT

7219 2023-11-07 07:58 InstallSetup2.exe  

ad27582b0ebc76918e74b90d1cbff760


NPKI HermeticWiper NSIS Generic Malware Suspicious_Script Malicious Library UPX Antivirus Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM Javascript_Blob PE File PE32 PNG Format JPEG Format OS Processor Check ZIP Format icon BMP Format PE64 CAB Malware Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Ransomware 		5.0 M ZeroCERT

7220 2023-11-07 07:58 IGCC.exe  

a3bb5280d95d7c638240975925c013ac


AgentTesla Generic Malware Antivirus PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer powershell AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 14.4 M ZeroCERT

7221 2023-11-07 07:56 Protected.exe  

a22595ce0f38b327951c42e18ad3eaaf


Formbook Raccoon Stealer Generic Malware UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 FormBook Malware download Malware Buffer PE suspicious privilege Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself 		3 7 2 5.6 M ZeroCERT

7222 2023-11-07 07:53 damianozx.exe  

7cfd00516e3d24c4b1227d6754f0aafa


PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.0 M ZeroCERT

7223 2023-11-07 07:52 jucostam2.1.exe  

1f6a213c979c6adff88e31e059d2825d


Formbook NSIS Malicious Library UPX PE File PE32 FormBook Malware download Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		3 8 2 1 3.4 M ZeroCERT

7224 2023-11-07 07:51 putty.exe  

cf3bc964f791ee22366b3277ee099329


Malicious Library UPX PE File PE32 OS Processor Check unpack itself 		0.8 M ZeroCERT

7225 2023-11-07 07:49 xinchao.exe  

18e92e00cd0e14cee7e4448e8fa476ef


Malicious Library Malicious Packer PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 4 5.2 M ZeroCERT

7226 2023-11-07 07:48 123.exe  

ceac8d319a011ba082cf1ab197d328e9


PE File PE32 .NET EXE Check memory Checks debugger unpack itself ComputerName 		1.4 M ZeroCERT

7227 2023-11-07 07:47 arinzezx.exe  

0fbfa908ef2e4abb29788d67bcc9c736


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Browser Email ComputerName Software crashed 		2 2 10.6 M ZeroCERT

7228 2023-11-07 07:46 Services.exe  

d9ce98a0b0029d26876ac86409bac27e


UPX VMProtect PE File PE32 Malware download Malware MachineGuid Malicious Traffic Check memory buffers extracted unpack itself Check virtual network interfaces IP Check PrivateLoader Tofsee DNS crashed 		9 24 4 3 5.6 M ZeroCERT

7229 2023-11-07 07:46 3.exe  

5bf9f652395cac44406e102289501e57


Malicious Library Malicious Packer PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 5.2 ZeroCERT

7230 2023-11-07 07:45 build.exe  

37e4a5aab62b40cf415b116cb246b2e2


Malicious Library UPX PE File PE32 OS Processor Check PDB unpack itself Remote Code Execution 		1.2 M ZeroCERT

keyword