popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7711 2023-10-16 11:21 x8.x8.x8.x0x0.doc  

c8dfd87f05e2744967e74f93a605827e


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS crashed 		1 1 1 4.2 31 ZeroCERT

7712 2023-10-16 11:20 fronttechnologicalprores.exe  

5a0d618b0f8ed5b550a811e4b1afdf48


Lumma Gen1 Emotet Malicious Library .NET framework(MSIL) UPX Http API ScreenShot Internet API AntiDebug AntiVM PE File PE64 CAB MSOffice File PNG Format .NET EXE JPEG Format PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Ransomware Lumma Stealer Windows Exploit Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key crashed 		3 5 8 3 22.2 M 45 ZeroCERT

7713 2023-10-16 11:16 ns3.jpg  

f394ecfbd02494369cd4cca7a70059fa


ELF VirusTotal Malware 		1.0 33 ZeroCERT

7714 2023-10-16 11:15 build.exe  

f6d470bdfc5dd8dd800580cfa71d1837


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 36 ZeroCERT

7715 2023-10-16 11:12 clip64.dll  

ed15379ed0c9f2e2cc0c105fc8f08896


Amadey Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Malicious Traffic Checks debugger unpack itself DNS 		1 2 3.8 51 ZeroCERT

7716 2023-10-16 11:12 RBY2.exe  

d334fdbe7080a9e36d94001903199491


Amadey Generic Malware UPX Malicious Library Malicious Packer Antivirus PE File PE32 .NET EXE OS Processor Check JPEG Format DLL PE64 Malware download Amadey VirusTotal Cryptocurrency Miner Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW Tofsee Windows ComputerName DNS Downloader CoinMiner 		10 27 18 4 9.8 M 59 ZeroCERT

7717 2023-10-16 11:11 laplas03.exe  

14817abceacc2869286157bc5198ba30


PE File PE64 VirusTotal Malware crashed 		2.2 56 ZeroCERT

7718 2023-10-16 11:10 schtasks.exe  

72aa1d054af015d3b90588e9e0cf04ae


AsyncRAT UPX Malicious Packer .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check 		2 ZeroCERT

7719 2023-10-16 11:10 audiodgse.exe  

be17427d37337c71ac701effd983f143


LokiBot Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		5 4 13.4 53 ZeroCERT

7720 2023-10-16 11:08 cred64.dll  

7d6c819c7accbd9abe8f6c4eb087eea2


Browser Login Data Stealer Malicious Library UPX PE File DLL PE64 OS Processor Check VirusTotal Malware PDB Checks debugger installed browsers check Browser ComputerName crashed 		2.4 49 ZeroCERT

7721 2023-10-16 11:06 timeSync.exe  

03a76b21baa5f39e5f592ad2e11a6336


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 36 ZeroCERT

7722 2023-10-16 11:05 humblezx.exe  

9db0aa4d2c28205d89536de9244cb7e8


AgentTesla SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS crashed 		2 4 9.6 56 ZeroCERT

7723 2023-10-16 11:04 gffdgfdgfdg.msi  

d5e7a19ebeaa041c09162cac95747cd1


Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2.8 38 ZeroCERT

7724 2023-10-16 11:03 source2.exe  

f7f4c10dd56dd175ed57b936d3ae87d1


UPX Admin Tool (Sysinternals etc ...) .NET framework(MSIL) Http API ScreenShot Internet API AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications sandbox evasion installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Firmware Cryptographic key 		1 2 2 14.8 48 ZeroCERT

7725 2023-10-16 11:01 treelatestprores.exe  

ff43aae7083352dc2d8251c1e622c737


Lumma Gen1 Emotet Malicious Library UPX Http API ScreenShot Internet API AntiDebug AntiVM PE File PE64 CAB OS Processor Check MSOffice File PNG Format PE32 .NET EXE JPEG Format Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Ransomware Lumma Stealer Windows Exploit Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key crashed 		3 5 8 3 20.8 M 49 ZeroCERT

keyword