popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7741 2023-10-13 08:45 Setup.exe  

635da4ec16e32532e4e1f6919dad1df3


Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware PDB IP Check ComputerName DNS 		1 51 1 4.0 M 5 ZeroCERT

7742 2023-10-13 08:41 svchost.exe  

c9abc0932559d7ecced02a9125acea05


Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check VirusTotal Malware unpack itself crashed 		1.8 M 13 ZeroCERT

7743 2023-10-13 08:41 owenzx.exe  

47ea784b5aa582da550a12add7ccd74d


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself DNS 		3 3.2 M 47 ZeroCERT

7744 2023-10-13 08:40 stub.exe  

7267c31ceaa3b35c96494360402a4788


Generic Malware Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram MachineGuid Windows utilities Tofsee Ransomware Windows Browser Email DNS Software crashed 		85 4 6.6 M 10 ZeroCERT

7745 2023-10-13 08:39 ansi.exe  

ca838ae291296ed4c06535f48a35bf32


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		1.8 M 43 ZeroCERT

7746 2023-10-13 08:36 audiodgse.exe  

6f78ea4133f958f8f064071729a12c3b


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 M 23 ZeroCERT

7747 2023-10-13 05:58 NMemo1Setp.exe  

f12aa4983f77ed85b3a618f7656807c2


Confuser .NET PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Ransomware DNS 		3 3 3.8 M 59 guest

7748 2023-10-13 04:24 NMemo1Setp.exe  

f12aa4983f77ed85b3a618f7656807c2


Confuser .NET PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Ransomware DNS 		3 3 3.8 M 59 guest

7749 2023-10-13 01:05 Password_ps1.txt  

975d7d238a824cf37893450cc62d2b9f


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

7750 2023-10-13 01:05 Password_dll.txt  

21567881b3d5d574a5ef76c7bda521dc


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

7751 2023-10-13 01:05 LBB_PS1_pass.ps1  

f9407d83dea3626282b5fbbb9127c7dc


Generic Malware task schedule Downloader Antivirus Socket DGA Http API ScreenShot Escalate priviledges PWS SMTP DNS KeyLogger Create Service Steal credential Sniff Audio HTTP Code injection Internet API persistence FTP P2P AntiDebug AntiVM Check memory unpack itself malicious URLs WriteConsoleW Windows Cryptographic key crashed 		2.6 guest

7752 2023-10-13 01:04 Password_exe.txt  

0bfc8082533654edacb07337a575b119


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

7753 2023-10-13 01:04 LBB_Rundll32.dll  

cf9b606e14c2a720052da5d84e22bd9b


BlackMatter Ransomware PE File DLL PE32 		0.6 guest

7754 2023-10-13 01:03 LBB_PS1_obfuscated.ps1  

e3c6fb29f3bea55756031a6571215cb9


Generic Malware Antivirus Check memory unpack itself Windows Cryptographic key 		0.8 guest

7755 2023-10-13 01:03 LBB_PS1.ps1  

9e1efd43fcb4cde660f44c7dde33c673


Generic Malware Antivirus Check memory unpack itself Windows Cryptographic key 		0.8 guest

keyword