popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7486 2023-10-25 12:19 bQRH.exe  

ac63955ca4261eab11b0b3142360d160


njRAT backdoor Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder DNS DDNS 		1 2 3.6 54 ZeroCERT

7487 2023-10-25 11:22 FX_432661.exe  

897af5616bfd6af5b687876924f39ee3


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware PDB Code Injection Checks debugger wscript.exe payload download Creates executable files suspicious process Tofsee crashed 		2 3 5.4 M 50 ZeroCERT

7488 2023-10-25 11:20 smss.exe  

841031a37159398b8eebca7bb7eff56b


Formbook AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 3 1 9.6 M 52 ZeroCERT

7489 2023-10-25 11:18 sbin22zx.exe  

78d449904f1a8a3000a3ba549dba764e


Formbook .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself crashed 		3 6 1 9.8 M 46 ZeroCERT

7490 2023-10-25 11:16 audiodgse.exe  

3059a8f7e4b873219bc3dc4d510e936a


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 53 ZeroCERT

7491 2023-10-25 11:16 kung.exe  

f6e91ab67abb675d4893f49397629d95


Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 2 6 8.0 M 66 ZeroCERT

7492 2023-10-25 11:00 HTMLprofile.doc  

5342b58b3951c40f8e5eb08f5d9824be


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Tofsee Windows Exploit Google DNS crashed 		7 30 9 4.4 28 ZeroCERT

7493 2023-10-25 10:55 HTMLCacheCentos.doc  

b1e8cf61c7cef7569de508e08785dadf


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		2.6 28 ZeroCERT

7494 2023-10-25 10:53 ImxyQs.exe  

6b99673a78e02bdd536e208b986c5b4d


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1 2.2 M 48 ZeroCERT

7495 2023-10-25 10:48 HTMLCacheCentos.dOC  

b39f481790c393d21234af0ced69da7a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.2 M 29 ZeroCERT

7496 2023-10-25 10:37 HTMLCachesClear.dOC  

ae797eafb49080484af9350259e7920a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.2 M 29 ZeroCERT

7497 2023-10-25 09:54 setup.exe  

fe90648e5db0ee19d7dcae2a5f4acc25


Malicious Library PE File PE32 VirusTotal Malware WMI Creates executable files RWX flags setting Checks Bios anti-virtualization ComputerName 		4.2 M 41 ZeroCERT

7498 2023-10-25 09:54 HTMLCacheCentos.dOC  

b39f481790c393d21234af0ced69da7a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 3 2.6 M 29 ZeroCERT

7499 2023-10-25 09:52 201.exe  

6c13146feeabc071309b41335514bf99


Themida Packer Malicious Library UPX Http API ScreenShot Internet API AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Check Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare AppData folder sandbox evasion VMware anti-virtualization installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Firmware Cryptographic key crashed 		1 2 2 16.0 M 23 ZeroCERT

7500 2023-10-25 09:52 HTMLprofile.dOC  

2885bbb18db2fc076e129a10729faadb


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 2 3 3.2 M 30 ZeroCERT

keyword