Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player
7651	2024-07-18 23:00	FAKE BTC SENDER zip.exe 3a7da416e0ed02e02fa874f3ae09e9a2 North Korea RedLine Infostealer RedLine stealer RedlineStealer Generic Malware Malicious Library WinRAR UPX .NET framework(MSIL) Malicious Packer PE File PE32 OS Processor Check DLL .NET DLL .NET EXE VirusTotal Malware PDB Check memory Checks debugger Creates executable files RWX flags setting unpack itself Check virtual network interfaces Windows RCE DNS Cryptographic key		1			6.0		48	guest

7652	2024-07-18 11:18	66979a57f071c_otraba.exe#kisot... b00510d3aa8bebcace517ac6cf2f1138 Malicious Library .NET framework(MSIL) UPX ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself					8.8	M	31	ZeroCERT

7653	2024-07-18 11:16	6697dafdd90a3_crypted.exe#1 b511a938c3da1d394dadd5c5c67bb48b Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed					2.2	M	40	ZeroCERT

7654	2024-07-18 11:14	wdeigthseven.vbs 3013532d03b160b1e9ef47e783317580 Generic Malware Antivirus PowerShell VirusTotal Malware VBScript powershell suspicious privilege Check memory Checks debugger wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key Dropper	2 Keyword trend analysis	4	3	1	10.0	M	4	ZeroCERT

7655	2024-07-18 11:12	逾期发票 5453909172 Overdue Invoic... 7c828476742a70dc25a084ffe5719998 Generic Malware Malicious Library .NET framework(MSIL) Antivirus PE File .NET EXE PE32 powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key					4.6			ZeroCERT

7656	2024-07-18 11:09	bin.ps1 d7f49d9cb663a5aab495beb612a8e415 Generic Malware Antivirus VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key					5.0		22	ZeroCERT

7657	2024-07-18 10:58	Joint working group.pdf.chm b445f85edab25e9216874ca8cad0efb5 AntiDebug AntiVM CHM Format VirusTotal Malware AutoRuns MachineGuid Code Injection Check memory RWX flags setting unpack itself Windows utilities suspicious process Windows					4.0		6	ZeroCERT

7658	2024-07-18 10:54	4c12d617aa51bb0c0108242da6aa00... 4c12d617aa51bb0c0108242da6aa0071 VBA_macro Word 2007 file format(docx) ZIP Format Vulnerability VirusTotal Malware unpack itself suspicious process WriteConsoleW	1 Keyword trend analysis				5.6		25	ZeroCERT

7659	2024-07-18 10:54	7ebfba0b98c135481c14db1c2f2da4... 7ebfba0b98c135481c14db1c2f2da484 VBA_macro AntiDebug AntiVM Word 2007 file format(docx) ZIP Format Lnk Format GIF Format VirusTotal Malware VBScript Code Injection Check memory wscript.exe payload download Creates shortcut Creates executable files exploit crash unpack itself suspicious process Exploit DNS crashed Dropper	1 Keyword trend analysis	2	1		10.0		23	ZeroCERT

7660	2024-07-18 10:53	design.docm 46b1a7d4befaf02eda1938d50ea8c488 VBA_macro AntiDebug AntiVM Word 2007 file format(docx) ZIP Format Lnk Format GIF Format VirusTotal Malware VBScript Code Injection Check memory wscript.exe payload download Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself suspicious process Exploit DNS crashed Dropper	1 Keyword trend analysis	2	1		10.0		23	ZeroCERT

7661	2024-07-18 10:52	attachment.docm 8783d7173dbdfd95f05501fa9a20e46f VBA_macro Word 2007 file format(docx) ZIP Format Vulnerability VirusTotal Malware unpack itself suspicious process WriteConsoleW	1 Keyword trend analysis				5.6		25	ZeroCERT

7662	2024-07-18 10:51	4c12d617aa51bb0c0108242da6aa00... 4c12d617aa51bb0c0108242da6aa0071 VBA_macro Word 2007 file format(docx) ZIP Format VirusTotal Malware					1.6		25	ZeroCERT

7663	2024-07-18 08:31	LuckySetup.exe 0384b1d87ff3be1c490657a34233dc9d Gen1 Generic Malware Malicious Library Malicious Packer UPX Antivirus .NET framework(MSIL) PE File PE32 MZP Format OS Processor Check DLL .NET DLL .NET EXE Lnk Format GIF Format PE64 VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser ComputerName crashed					5.8		11	ZeroCERT

7664	2024-07-18 08:29	appmodedrivme.exe ffe6422dff4cbe7efdbd7ac4983504d4 Malicious Library .NET framework(MSIL) PE File ftp .NET EXE PE32 Check memory Checks debugger unpack itself ComputerName					1.4			ZeroCERT

7665	2024-07-18 08:27	sc2.exe 0bb47290ac45642ac44a00846eda74e2 AsyncRAT Malicious Library Malicious Packer .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Malware download AsyncRAT NetWireRC VirusTotal Malware DNS DDNS		2	4		1.6		56	ZeroCERT