popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7246 2023-11-06 09:52 nonnyzx.exe  

a7871243c89d91c612b5611003531e30


UPX .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 53 ZeroCERT

7247 2023-11-06 09:51 d-7  

802cf804f8e94474c805d2fba97c2f41


Malicious Library Downloader UPX AntiDebug AntiVM PE File DLL PE32 JPEG Format ZIP Format Malware download VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger Creates executable files RWX flags setting unpack itself Windows utilities suspicious process sandbox evasion Windows Browser ComputerName DNS Downloader 		4 2 5 8.2 37 ZeroCERT

7248 2023-11-06 09:51 defounderzx.exe  

2ed10c1ecb18c82e28180b08eb96fbc2


LokiBot .NET framework(MSIL) PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Discord Browser Email ComputerName DNS crashed keylogger 		1 2 3 12.6 44 ZeroCERT

7249 2023-11-06 09:49 amday.exe  

3e478dcc2a01b6115012627f06045690


Themida Packer Downloader UPX Malicious Packer VMProtect Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM Malware download Amadey VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files RWX flags setting unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process AppData folder malicious URLs WriteConsoleW VMware anti-virtualization Windows ComputerName Remote Code Execution Firmware DNS crashed Downloader 		3 5 5 16.2 28 ZeroCERT

7250 2023-11-06 09:48 Output.exe  

f5c18dc1c7bb825ab9355fcf0772f398


UPX .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself ComputerName DNS 		1 2.2 12 ZeroCERT

7251 2023-11-06 09:45 governorzx.exe  

45ab39f2cc353535047f5a5d4e8bcbd1


LokiBot PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed 		4 6 12.4 47 ZeroCERT

7252 2023-11-06 09:43 MMkNn.exe  

576ea37ddee70b9062761e4bcc0c6a64


RedLine Infostealer UltraVNC Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows DNS Cryptographic key crashed 		1 3 5 4.0 55 ZeroCERT

7253 2023-11-06 09:41 soyazx.exe  

6713d6eadee3ad9164e66e555eaa16ee


Formbook AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 5 1 8.4 35 ZeroCERT

7254 2023-11-06 09:41 spacezx.exe  

1536cc9a88c87ba6a5e0dc22e2b876c2


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 48 ZeroCERT

7255 2023-11-06 09:41 s5.exe  

e4c5c50d9c573109411348e4c7f79dd8


Malicious Library UPX Http API HTTP Internet API AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows ComputerName Remote Code Execution DNS 		8 5 1 12.4 39 ZeroCERT

7256 2023-11-06 09:40 whesilozx.exe  

a117d7af8f85cacb310671b834482605


LokiBot .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Software crashed keylogger 		2 2 11.8 37 ZeroCERT

7257 2023-11-06 09:37 patch.exe  

836f7ee9f560b60cd68b2e3b3b6e1a26


Malicious Library UPX ASPack PE File PE32 ZIP Format ftp VirusTotal Malware PDB Creates executable files unpack itself AppData folder 		2.4 12 ZeroCERT

7258 2023-11-06 09:37 isbinzx.exe  

f297b0f6ff8bace56e8bc669a63df2a7


Formbook PWS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		3 9.2 44 ZeroCERT

7259 2023-11-06 09:35 kellyzx.exe  

76a433c70bad5aa138a6c1ee1597dbb8


LokiBot .NET framework(MSIL) Socket PWS DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs suspicious TLD installed browsers check Browser Email ComputerName DNS Software 		1 2 9 13.6 50 ZeroCERT

7260 2023-11-06 09:34 millianozx.exe  

4aec69a71dff9be27f998272b34a445d


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 50 ZeroCERT

keyword