popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7606 2023-10-19 08:00 Ads.exe  

6e781cf49af81b961d0ab465210a35f8


Generic Malware Malicious Library UPX Malicious Packer Antivirus AntiDebug AntiVM PE File PE64 PE32 OS Processor Check DLL Malware download VirusTotal Cryptocurrency Miner Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder malicious URLs suspicious TLD Tofsee Windows DNS Downloader CoinMiner 		10 29 17 3 13.2 M 36 ZeroCERT

7607 2023-10-19 07:59 Random.exe  

191febed315d7c3a620b564e99e5f3cc


Gen1 Emotet Generic Malware UPX Malicious Library Malicious Packer Antivirus AntiDebug AntiVM PE File PE64 PE32 .NET EXE OS Processor Check PNG Format DLL CAB MSOffice File JPEG Format Malware download VirusTotal Cryptocurrency Miner Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs suspicious TLD WriteConsoleW Tofsee Windows Exploit ComputerName DNS crashed Downloader CoinMiner 		12 32 17 3 19.4 M 23 ZeroCERT

7608 2023-10-19 07:59 audiodgse.exe  

d7bde041b821e3b3e6e3a71846cee9ef


Formbook NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself DNS 		5 11 1 5 4.8 M 40 ZeroCERT

7609 2023-10-19 07:56 audiodgse.exe  

5f19da54cd1ddcef58de1e0bdf595459


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 M 40 ZeroCERT

7610 2023-10-19 07:55 system32.exe  

d1e40dfbae57e5f3205117f5c9d64a76


Vidar Gen1 Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Telegram MachineGuid Malicious Traffic Check memory WMI Creates shortcut Creates executable files unpack itself Collect installed applications Check virtual network interfaces AntiVM_Disk sandbox evasion anti-virtualization VM Disk Size Check installed browsers check Tofsee Browser Email ComputerName DNS Software crashed 		4 5 4 1 13.2 M 49 ZeroCERT

7611 2023-10-19 07:54 audiodgse.exe  

0ea00cd19382a471a5f599c54dff91f1


UPX .NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 42 ZeroCERT

7612 2023-10-19 07:52 audiodgse.exe  

834f8d3c68e80cb0288dac71275bf89a


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 47 ZeroCERT

7613 2023-10-19 07:52 undergroundzx.exe  

050408a7ec8e1c0ef8a7e417fbccc299


LokiBot .NET framework(MSIL) PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Discord Browser Email ComputerName DNS Software crashed keylogger 		1 4 6 13.4 M 29 ZeroCERT

7614 2023-10-19 07:50 audiodgse.exe  

8ed749953dfc694808ed27f1aea08b71


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 12.6 M 30 ZeroCERT

7615 2023-10-19 07:49 damianozx.exe  

487fa93e89fd1ec0969e0083966714bd


PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 9.8 M 27 ZeroCERT

7616 2023-10-19 02:14 Rechung-87_PDF.js.pdf  

64b82476268205bc28b7fccca5808cf0


PDF 		guest

7617 2023-10-18 18:04 sogn.exe  

b67ddf6cef57729b557a66460c0b6dd4


UPX .NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 M 43 ZeroCERT

7618 2023-10-18 18:01 test.exe  

3939345bad08812d7dba41f064c1665d


Malicious Packer PE File PE32 VirusTotal Malware unpack itself DNS 		2 3.6 M 62 ZeroCERT

7619 2023-10-18 18:00 arinzezx.exe  

e25e15eb096d884c88cce0f4e079d2de


UPX .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Browser Email ComputerName Software crashed 		2 2 10.8 M 41 ZeroCERT

7620 2023-10-18 17:57 123.exe  

62914a3d73d59716bd8dbbbd947f6a02


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 M 55 ZeroCERT

keyword