popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7471 2023-10-26 10:23 timeSync.exe  

ab629ce2f730accf1ccfe3c5054d6c1b


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 37 ZeroCERT

7472 2023-10-25 18:27 File.7z  

86f0e6986a754d96179b2c20d8db49b6


PrivateLoader Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Dridex Cryptocurrency Miner Malware Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Browser Trojan DNS Downloader CoinMiner 		80 153 51 29 8.4 M ZeroCERT

7473 2023-10-25 16:50 up.ps1  

21440931518ff0df59af9b94e52a7c84


Lnk Format GIF Format VirusTotal Malware powershell AutoRuns MachineGuid Check memory Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 1 7.2 M 12 ZeroCERT

7474 2023-10-25 16:42 logsconversationtelegramgukiws...  

12e353c522471d522f64e0c3541a1b7d


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM WriteConsoleW 		1 0.6 ZeroCERT

7475 2023-10-25 13:55 xK9nHGYUpDXC.exe  

b5953f71d7caba8a79db276bc0d15b55


AsyncRAT task schedule Downloader Malicious Library UPX Malicious Packer .NET framework(MSIL) Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDe VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		5.6 57 ZeroCERT

7476 2023-10-25 13:52 qasx.vbs  

ff2a2bc8850b1ad61236bd460eb61e01


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PowerShell Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee EXPLOIT_KIT Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed 		2 3 2 1 15.8 M 17 ZeroCERT

7477 2023-10-25 13:52 SAN.txt.exe  

6bdb7a11d0eaa407e7a7f34d794fb567


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS crashed 		4 6 4.6 54 ZeroCERT

7478 2023-10-25 13:33 MAH.txt.exe  

7ea06a0e6c1e5707a23364ae6984b4f3


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		4 6 5.2 51 ZeroCERT

7479 2023-10-25 13:32 IGCC.vbs  

42bc2a9470984d793673d9aae1a933b8


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 13 ZeroCERT

7480 2023-10-25 13:32 KK.txt.ps1  

671cd3920752aa4da1d0d0130fb79085


Generic Malware Antivirus VirusTotal Malware powershell Check memory unpack itself powershell.exe wrote WriteConsoleW Windows Cryptographic key 		1 2.8 19 ZeroCERT

7481 2023-10-25 13:19 HTMLobject.vbs  

74a3ea36669a5bdbeff3775545527a92


LokiBot Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PowerShell Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		3 8 6 1 20.0 M 13 ZeroCERT

7482 2023-10-25 13:18 HTMLbrowser.vbs  

80c07cfd04a28aa0b03f1396fdf81b2d


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.0 ZeroCERT

7483 2023-10-25 13:18 HNB.txt.exe  

43ec3cc0836bd759260e8cf120b79a7b


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		1 5 5 8.0 54 ZeroCERT

7484 2023-10-25 12:19 Comprobante_transfer.pdf.js  

c8bb8a34766ec04c304597c76d179f4b


ActiveXObject VirusTotal Malware wscript.exe payload download Check virtual network interfaces Tofsee DNS crashed 		3 5 2 1 3.4 M 15 ZeroCERT

7485 2023-10-25 12:19 cod.pdf.vbs  

b5ef73339bacf531b3d122ebd9509468


Antivirus VirusTotal Malware unpack itself crashed 		1.0 M 6 ZeroCERT

keyword