popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7726 2024-07-15 09:21 dmi.txt.vbs  

7e4e5ec429a0738c15593112bcf50406


Antivirus VirusTotal Malware 		0.8 M 23 ZeroCERT

7727 2024-07-15 09:19 pqjvyogm.exe  

6498c822022751dbe8abb655e6ac9db0


PE File .NET EXE PE32 		0.4 M ZeroCERT

7728 2024-07-15 09:19 AntiVirus2.exe  

e81179996dbd2490c45ca13d80eae0a8


PE File .NET EXE PE32 VirusTotal Malware 		1.6 M 58 ZeroCERT

7729 2024-07-15 09:19 1PDF.FaturaDetay_202407.exe  

d8bf792f818877bf4848fde9511caeb8


Malicious Library Antivirus UPX DllRegisterServer dll PE File PE32 MZP Format VirusTotal Malware 		1.6 44 ZeroCERT

7730 2024-07-15 09:19 SIP.03746.XSLSX.exe  

a3e681364daaa68ce0177581573f483f


Malicious Library Antivirus UPX DllRegisterServer dll PE File PE32 MZP Format VirusTotal Malware 		1.4 38 ZeroCERT

7731 2024-07-15 09:19 217.exe  

42e2d273ee6215957f2b979737a74b45


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware 		1.2 26 ZeroCERT

7732 2024-07-14 18:02 random.exe  

f7a1094ec901c30a546487c8aa2a3093


EnigmaProtector PE File PE32 VirusTotal Malware Check memory ICMP traffic unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Browser ComputerName DNS crashed 		1 1 7.8 M 64 ZeroCERT

7733 2024-07-14 18:00 Sazae-1.exe  

4695f98bf6e8c0908c0b6af77ec31a6c


Emotet Hide_EXE Malicious Library .NET framework(MSIL) UPX Anti_VM PE File .NET EXE PE32 OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		2.8 M 61 ZeroCERT

7734 2024-07-14 17:58 potkmdaw.exe  

cefc3739d099bae51eb2a9d3887ac12c


Generic Malware Downloader Malicious Library UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE File PE64 OS Proces VirusTotal Malware PDB MachineGuid Code Injection Creates executable files ICMP traffic AppData folder RCE DNS 		1 7.4 M 49 ZeroCERT

7735 2024-07-14 17:58 fatherscientificpro.zip  

23cad24465d730936b5c3d2b7de5bfd1


ZIP Format VirusTotal Malware 		1.2 M 42 ZeroCERT

7736 2024-07-14 17:56 1.exe  

2b292145e4ec28e8bd8b22c1353543d1


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.2 M 34 ZeroCERT

7737 2024-07-14 17:56 Q-backup.exe  

55f03bade4a94d05b69e40b38b8554ae


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.2 M 59 ZeroCERT

7738 2024-07-14 17:54 Microsoft_Service.exe  

1644c4839846a1b6524e38071528a564


Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 63 ZeroCERT

7739 2024-07-14 17:53 Ndhqvdmn-1.exe  

db361206702d61f0beff5f87508152e5


Generic Malware Malicious Library Antivirus PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process AppData folder Windows ComputerName Cryptographic key 		5.4 M 57 ZeroCERT

7740 2024-07-14 17:52 random.exe  

233ea23b1c1587f1cf895f08ba6da10b


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.4 M 61 ZeroCERT

keyword