popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7696 2023-10-16 12:50 investorlokibase64.txt.exe  

548a3fa91d4c14218f61e38fdffaebe7


Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 6.6 ZeroCERT

7697 2023-10-16 12:50 invkmc.jpg.vbs.exe  

7d2913e9f825bd506141c69d609e50dd


PE File DLL PE32 DNS 		1 0.6 ZeroCERT

7698 2023-10-16 12:50 invkmc.jpg2.vbs.exe  

4e6f8a41871bf79323253b90b9c938ff


PE File PE32 		ZeroCERT

7699 2023-10-16 12:50 My2.exe  

df280925e135481b26e921dd1221e359


PE File PE64 VirusTotal Cryptocurrency Miner Malware DNS CoinMiner 		4 1 2.2 47 ZeroCERT

7700 2023-10-16 12:44 toolspub2.exe  

c054b59d8acd94091def95ac0eb1b21d


Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		7.0 32 ZeroCERT

7701 2023-10-16 12:38 x9.x9.x9.x0.x0.x0.doc  

4263e519252b6b43dd6901b64f05133d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash Exploit DNS crashed 		1 1 1 3.8 M 35 ZeroCERT

7702 2023-10-16 12:04 looksoprettyundertheroof.vbs  

c6754754996c3347b6cafe44af0e7cdc


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

7703 2023-10-16 12:04 kenspa.vbs  

a32b1ecc7fc8c489e23976d324d5c4aa


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 18 ZeroCERT

7704 2023-10-16 12:04 kenjkt.vbs  

5029c7922f007aee3bba22e60cab46c6


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 17 ZeroCERT

7705 2023-10-16 11:52 invlokiwedFile.vbs  

2f91256fa60710cda18cc702684f78ab


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

7706 2023-10-16 11:51 invkmc.jpg.vbs  

7b47208b9424d4beff846d5942f6e384


Hide_EXE Antivirus VirusTotal Malware unpack itself crashed 		1.4 23 ZeroCERT

7707 2023-10-16 11:51 investorlokiiiiiiFile.vbs  

dd13d2f6e0075f0b9bfa13f4493e6db2


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 17 ZeroCERT

7708 2023-10-16 11:23 droiddfffffffffffffFile.vbs  

81526bd6e81d8efbe8a8a364c2b30b1a


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

7709 2023-10-16 11:22 bulaeko.vbs  

3e1ff6eefd4496936edf51fb46144380


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 18 ZeroCERT

7710 2023-10-16 11:22 anykmc.txt.vbs  

02de2b9fc44bc82bf8e627cca8058f0f


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 8.0 26 ZeroCERT

keyword