popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7456 2023-10-26 17:14 teste2.jpg  

e41099316a6272c73e80c90972c3203e


Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library UPX Antivirus AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Check VirusTotal Malware powershell AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS crashed 		2 1 14.2 M 26 ZeroCERT

7457 2023-10-26 17:12 HTMLcacheIEsession.dOC  

55588a5b96ec028485a99a5bcd648d0e


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 3 2.8 M 30 ZeroCERT

7458 2023-10-26 13:59 mohammeddroidupdatedfilebase64...  

6070a1b84846a0946639a374043787d6


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware Check memory Checks debugger unpack itself Windows Browser Email ComputerName crashed 		4.0 58 ZeroCERT

7459 2023-10-26 13:23 jajajjajapapapappanananan.vbs  

7e9d44a6c4367491ad178bf62548f136


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 3 ZeroCERT

7460 2023-10-26 13:23 eveningFile.vbs  

088dd62ff5ed6d7e15caab5a0bb62f10


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 3 ZeroCERT

7461 2023-10-26 13:22 aaaaa.txt.exe  

f7a2deae211b49311fa7f56c1e4566f2


Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 62 ZeroCERT

7462 2023-10-26 10:43 HTMLEVENbrowser.dOC  

8ff3248ebdfa3b7dd737f7bee9b9dae6


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 4 2 4.0 M 29 ZeroCERT

7463 2023-10-26 10:41 HTMLIECachesBrowser.dOC  

a08ca8e6fd0e7002499434aa2547d160


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 4 2 4.0 M 29 ZeroCERT

7464 2023-10-26 10:40 foto1661.exe  

7613290b26555e6b7b16131d17331960


Amadey RedLine stealer Gen1 Emotet Generic Malware Malicious Library UPX Antivirus .NET framework(MSIL) Confuser .NET Malicious Packer Admin Tool (Sysinternals etc ...) ScreenShot PWS AntiDebug AntiVM PE File PE32 CAB OS Processor Check .NET E Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware powershell Microsoft AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Exploit Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		25 14 18 6 24.8 40 ZeroCERT

7465 2023-10-26 10:38 Main332.js  

c3cc912df10bafc0de538be5557710ac


AntiDebug AntiVM VirusTotal Malware Code Injection Malicious Traffic wscript.exe payload download Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows DNS 		2 3 2 7.6 2 ZeroCERT

7466 2023-10-26 10:38 T1.js  

caa023ac5ec92dd9fd17b33a448c140a


AntiDebug AntiVM VirusTotal Malware Code Injection wscript.exe payload download Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows DNS 		2 3 8.4 14 ZeroCERT

7467 2023-10-26 10:28 Final rooming list.bat  

98000fd6e24b741927fd81c1d61ae996


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.4 4 ZeroCERT

7468 2023-10-26 10:24 987123.exe  

7ed1926e1e6e2fe6390c3c6d4b8878aa


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 35 ZeroCERT

7469 2023-10-26 10:23 tus.exe  

10a17abe9f1d739be062dfa9f1730298


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware PDB Code Injection buffers extracted 		7.0 32 ZeroCERT

7470 2023-10-26 10:23 davincizx.exe  

9f12d35cb063268ba5e58c71c26ef0e4


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware 		1.4 37 ZeroCERT

keyword