popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7681 2023-10-16 18:57 setup.exe  

3ced118256af2b36b3b07ca4af5711b6


Malicious Library PE File PE32 VirusTotal Malware WMI Creates executable files RWX flags setting Windows utilities Checks Bios anti-virtualization Windows ComputerName 		4.2 24 ZeroCERT

7682 2023-10-16 18:44 sihost.exe  

0855867efc0b10ff80a9237b8ee9ba3d


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Browser Email ComputerName Software crashed 		2 2 11.0 24 ZeroCERT

7683 2023-10-16 18:42 Preparing.exe  

8fda57ed69bc4c9827a92f417f2caa13


Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) .NET framework(MSIL) PWS SMTP AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 10.6 14 ZeroCERT

7684 2023-10-16 18:41 clip64.dll  

27ff8e12b152ccf47b293d5375ea5d96


Amadey Malicious Library UPX Admin Tool (Sysinternals etc ...) PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Checks debugger unpack itself 		2.0 57 ZeroCERT

7685 2023-10-16 18:39 cred64.dll  

a83604e32360e2b32ece536021559f13


Browser Login Data Stealer Malicious Library UPX PE File DLL PE64 OS Processor Check VirusTotal Malware PDB Checks debugger unpack itself installed browsers check Browser ComputerName DNS crashed 		1 3.4 51 ZeroCERT

7686 2023-10-16 18:38 Ihtfxltx.exe  

f3234097fc5189cd1e558550ba0617fc


PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.4 30 ZeroCERT

7687 2023-10-16 18:37 smss.exe  

6e8215eee3034d6dcf18d79d397e5715


Malicious Library UPX PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		3.0 33 ZeroCERT

7688 2023-10-16 18:36 setup-lightshot.exe  

416c97ae7efb1385cf83a5fd277e68ee


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Tofsee ComputerName 		1 2 2 3.6 39 ZeroCERT

7689 2023-10-16 18:35 Roblox_Level_4_Exploit.exe  

01af0cd59dfa4e45fc8cb5d9ecbd6de3


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder Tofsee ComputerName 		1 2 2 4.0 39 ZeroCERT

7690 2023-10-16 18:35 fuljani.exe  

942dbace85ab0d41045bb37a66ccb139


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Buffer PE Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Tofsee ComputerName 		1 2 2 4.8 40 ZeroCERT

7691 2023-10-16 18:35 fuljani.exe  

942dbace85ab0d41045bb37a66ccb139


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Buffer PE Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Tofsee ComputerName 		1 2 2 4.8 40 ZeroCERT

7692 2023-10-16 12:55 gate4.exe  

5c6b1ca0336366662d0f444e01f96a3a


PrivateLoader RedLine stealer Themida Packer Generic Malware UPX Malicious Library VMProtect ScreenShot PWS Socket DGA Http API DNS Internet API SMTP Anti_VM AntiDebug AntiVM PE File PE64 PE32 ZIP Format DLL OS Processor Check PNG Format Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Microsoft Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check PrivateLoader Tofsee Ransomware Stealer Windows Update Browser RisePro Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		35 54 31 30.4 M 31 ZeroCERT

7693 2023-10-16 12:52 kenspa.txt.exe  

5a41d36eb69dd4649d09163b8dd7e759


Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 6.6 ZeroCERT

7694 2023-10-16 12:52 kenjkt.txt.exe  

f871241fffd3002353e3ed0eea50daa5


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		3 4 6.8 ZeroCERT

7695 2023-10-16 12:50 bulak.txt.exe  

c630301e6fa6e55bbb4eedeafb870f83


PE File PE32 .NET EXE Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName 		1 2 1 6.8 ZeroCERT

keyword