popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7321 2023-11-02 10:11 Firefoxwzexefile.vbs  

0b7f2e1c70bb997a5b6f1b0072c23679


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 2 ZeroCERT

7322 2023-11-02 10:11 12345Warzone.txt.exe  

168457c869ff329fb895e314d1d8d61c


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check Remote Code Execution 		0.6 ZeroCERT

7323 2023-11-02 10:09 1stANzasWQA435786990Mqa9.js  

f757a1a6ca3595f7219e80540bcbbf52


Generic Malware Antivirus ActiveXObject PowerShell VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 4 2 10.4 M 3 ZeroCERT

7324 2023-11-02 10:09 goblin.txt.exe  

faac5d3f56e2a6a204161fb0d29f49a6


Malicious Packer PE File PE32 .NET EXE 		ZeroCERT

7325 2023-11-02 10:08 cred64.dll  

0111e5a2a49918b9c34cbfbf6380f3f3


Malicious Library UPX Anti_VM PE File DLL PE64 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB MachineGuid Malicious Traffic Checks debugger unpack itself Windows utilities sandbox evasion installed browsers check Windows Browser DNS Software 		1 1 7.0 M 27 ZeroCERT

7326 2023-11-02 10:07 clip64.dll  

8da053f9830880089891b615436ae761


Amadey Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Malicious Traffic Checks debugger unpack itself DNS 		1 1 3.6 M 38 ZeroCERT

7327 2023-11-02 10:05 HTMLIEbrowserHistorycache.vbs  

857f884bf745995ea1ccd1275446201f

VirusTotal Malware wscript.exe payload download Tofsee 		1 2 2 2.0 3 ZeroCERT

7328 2023-11-02 07:51 IGCC.exe  

b559f853c534c533f75d09966aec1a81


Formbook NSIS Malicious Library UPX PE File PE32 FormBook Malware download Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		5 9 1 1 3.0 M ZeroCERT

7329 2023-11-02 07:48 strakonaj2.1.exe  

4cb44bd5d786a7f2b53fd6d9602a2b8c


NSIS Malicious Library UPX PE File PE32 OS Processor Check Check memory Creates executable files unpack itself AppData folder crashed 		3.2 M ZeroCERT

7330 2023-11-02 07:48 hussanzx.exe  

83cdb597d20acd75dd60840276ca77b1


.NET framework(MSIL) PE File PE32 .NET EXE PDB Check memory Checks debugger unpack itself 		1.4 M ZeroCERT

7331 2023-11-02 07:46 litoptics2.1.exe  

77e2b6a251b3ed0440f515824c1d67fd


PE File PE32 .NET EXE PDB Check memory Checks debugger unpack itself 		1.4 ZeroCERT

7332 2023-11-02 07:46 haloup.exe  

3e6ed1ceb52c1d4e9ef09cd3aebe7741


Malicious Library UPX PE File PE64 OS Processor Check 		0.2 ZeroCERT

7333 2023-11-01 19:37 Biacs.exe  

8bbba1d1448825a0c428dc296573cf8d


Formbook AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious TLD Windows DNS Cryptographic key 		21 24 12 18 11.0 M 30 ZeroCERT

7334 2023-11-01 18:48 IGCC.exe  

f26a2f5b20109013af6303c9adc2546d


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Generic Malware Google Chrome User Data Downloader .NET framework(MSIL) Antivirus Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Internet API KeyLogger AntiDebu Remcos VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS keylogger 		1 4 3 13.4 M 27 ZeroCERT

7335 2023-11-01 18:47 2xf9uf.bat  

0f74a2178106172bd65f8bda36eb2572


Generic Malware Downloader Antivirus UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		5.8 6 ZeroCERT

keyword