popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7426 2023-10-27 17:04 cleanupdate.exe  

c9aa05e75a369370955cf71b12a2121a


Browser Login Data Stealer Amadey Hide_EXE Malicious Library UPX Http API ScreenShot HTTP Code injection Internet API AntiDebug AntiVM PE File PE32 .NET EXE JPEG Format DLL PE64 OS Processor Check Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		4 2 5 20.0 M 23 ZeroCERT

7427 2023-10-27 17:03 HTMLXLAMieBrowser.dOC  

baeaa0fda1df43a65dc12777327db43b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 3 4.0 M 28 ZeroCERT

7428 2023-10-27 13:28 rumpe.jpg.exe  

85fa49d81d22418534ded291306be57d


Malicious Library UPX .NET DLL PE File DLL PE32 OS Processor Check VirusTotal Malware PDB 		1.4 27 ZeroCERT

7429 2023-10-27 13:24 obm.txt.exe  

697ebf34888a6672c7ade14701fe2c00


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer Email Client Info Stealer suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName crashed 		2.6 ZeroCERT

7430 2023-10-27 12:25 File.7z  

3c62d34e99c4d0766c6a30aff0ff00d4


PrivateLoader Stealc Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser Trojan DNS Downloader 		55 91 42 23 6.8 M ZeroCERT

7431 2023-10-27 10:58 ngown.vbs  

74558dda2ee55f1223e34b0e18411764


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 5 2 9.6 M 5 ZeroCERT

7432 2023-10-27 10:56 don.vbs  

049cbf1fa6fb0b213b5d6aace06efbd9

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

7433 2023-10-27 10:54 ngone.vbs  

bb1a98b873c6fbebb5c2bab804fbe831

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

7434 2023-10-27 10:54 bdolsx.vbs  

44c457dd13efcd6622b1b6dbab5c1965

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

7435 2023-10-27 10:13 ereeeeeeeeeeeefereFile.vbs  

73d2fd40cb82f20bb3d340720da666d0


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 3 ZeroCERT

7436 2023-10-27 10:13 obuxu.vbs  

136abae59cb3eb697de1c5e20778ecd6


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 2 ZeroCERT

7437 2023-10-27 10:12 investorbase64.txt.exe  

c6bbafd04b4ea3523f5dd3de0f174c3e


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware Check memory Checks debugger unpack itself Windows Browser Email ComputerName crashed 		4.0 58 ZeroCERT

7438 2023-10-27 10:11 co.txt.exe  

1712fc8e11670d4dbbb420b385b0db30


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName crashed 		3.8 51 ZeroCERT

7439 2023-10-27 10:09 bxsdhvfnrn.exe  

a303a2d627cb8588f3c30ac8b353674c


Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 52 ZeroCERT

7440 2023-10-27 10:08 E-FILLING FORM B.bat  

252278969fa0d8c1cc719e73b61a76a4


UPX Admin Tool (Sysinternals etc ...) Antivirus PE File PE32 VirusTotal Malware AutoRuns Check memory Creates executable files RWX flags setting unpack itself suspicious process AppData folder WriteConsoleW Windows ComputerName Remote Code Execution crashed 		5.0 34 ZeroCERT

keyword