popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7441 2023-10-27 10:07 getclient.exe  

8a91f3743fe18864ce449301ba6c7cfd


Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check VirusTotal Malware crashed 		1.6 M 21 ZeroCERT

7442 2023-10-27 07:40 timeSync.exe  

555b5b941485801baec85945db27bb86


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		1.8 M 33 ZeroCERT

7443 2023-10-27 07:38 EasySup.exe  

0630254696658572f31b822013f00a6a


Malicious Library UPX Malicious Packer MPRESS PE File PE32 OS Processor Check URL Format PE64 VirusTotal Malware Malicious Traffic DNS crashed 		1 1 3.4 32 ZeroCERT

7444 2023-10-27 07:38 202.exe  

7102d2f457071b2c66c6c0ec3035ae7e


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Malicious Traffic Check memory buffers extracted unpack itself Collect installed applications sandbox evasion installed browsers check Ransomware Lumma Stealer Browser ComputerName Firmware 		1 3 2 7.8 31 ZeroCERT

7445 2023-10-27 03:58 main.js  

dda272d9991575c784d93deca75a14d8

crashed 		0.2 guest

7446 2023-10-27 00:09 winrar-x64-700b1.exe  

ec258c62501e30c84217db59cd156e84


Emotet Gen1 Malicious Library UPX Malicious Packer Antivirus PE File PE64 OS Processor Check CHM Format DLL PE32 VirusTotal Malware PDB Check memory Creates executable files RWX flags setting unpack itself Remote Code Execution 		2.8 2 guest

7447 2023-10-26 17:40 setup.exe  

8a22c4b4e8b911a51322dfd78fe799c4


Themida Packer PE File PE64 VirusTotal Malware unpack itself Windows crashed 		3.0 M 48 ZeroCERT

7448 2023-10-26 17:22 VIBINVES.vbs  

0b92e010b599dc8280e4ab32c1ed02ed


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 2 ZeroCERT

7449 2023-10-26 17:21 HTMLcachesIE.vbs  

b70068430fab03962b3fe2d15588c894


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 1 ZeroCERT

7450 2023-10-26 17:20 privateexploiteveningFile.vbs  

5dc2c5a74a18f3b1e8d24101e8bac3cc


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 1 ZeroCERT

7451 2023-10-26 17:19 sbinzx.exe  

fc8b3a3005cdc80ce19af33a57010fa8


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 6 1 9.2 M 24 ZeroCERT

7452 2023-10-26 17:16 pvtHTMLbroswer.dOC  

541a8be00b26a27ed851731d47a0ae31


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		2 4 2 4.2 M 30 ZeroCERT

7453 2023-10-26 17:16 autolog.exe  

5a7848fdbc0ca7bab05257e730497197


Formbook NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		3 7 1 3 4.2 M 48 ZeroCERT

7454 2023-10-26 17:16 audiodgse.exe  

699b84a4a3c73a574bc51f461ad209db


.NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser 		16 14 1 11.4 M 43 ZeroCERT

7455 2023-10-26 17:14 updates_installer.exe  

898cb4fca84ad5e7009d15b2ec04f3a6


UPX Malicious Library Http API ScreenShot Internet API AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check DLL Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Ransomware Lumma Stealer Windows Browser ComputerName Firmware Cryptographic key 		1 4 4 15.8 34 ZeroCERT

keyword