popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7786 2023-10-12 09:28 bQ6f.exe  

955a7deb29f4b03b35faa62100d416fd


Malicious Packer Downloader ScreenShot AntiDebug AntiVM PE File PE32 Browser Info Stealer Remcos VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS DDNS keylogger 		1 4 3 11.6 56 ZeroCERT

7787 2023-10-12 07:52 sihost.exe  

7f6feed7fc881b9b450fb7f3b726c2ae


AgentTesla Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 14.0 M 22 ZeroCERT

7788 2023-10-12 07:50 macbomard2.1.exe  

7f4be9fcb7371a4a4c98462602a33639


NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		4 9 1 4.0 M 37 ZeroCERT

7789 2023-10-12 07:48 5ea275.exe  

1c576ece1cb918832be3d9e5f665388b


Themida Packer Generic Malware UPX Anti_VM PE File PE32 VirusTotal Malware Check memory unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process WriteConsoleW VMware anti-virtualization Windows Firmware crashed 		7.8 M 56 ZeroCERT

7790 2023-10-12 07:47 random.exe  

c47b267a11aaf34abcf7ceec04e629c1


Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check VirusTotal Malware 		0.8 M 16 ZeroCERT

7791 2023-10-12 07:45 sa.exe  

3e2647ddf841fd56db65ef710f6801f8


Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 58 ZeroCERT

7792 2023-10-12 07:45 smss.exe  

ced4af5a976fb361bfded06260f5985f


Malicious Library UPX PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		3.0 33 ZeroCERT

7793 2023-10-12 02:23 up.exe  

5e6716377dc71d7fa5c97d778c154ce4


Malicious Packer PE File PE32 MZP Format Lnk Format GIF Format VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself AntiVM_Disk anti-virtualization VM Disk Size Check human activity check Interception ComputerName Remote Code Execution Firmware crashed 		1 4 9.2 55 malware123

7794 2023-10-11 18:38 cleanse.exe  

0e85f5058fa30907be18273932a6f917


Generic Malware Antivirus Malicious Library UPX Anti_VM PE File PE32 .NET EXE OS Processor Check ZIP Format BMP Format CHM Format DLL MSOffice File JPEG Format Word 2007 file format(docx) VirusTotal Malware Check memory Checks debugger unpack itself AppData folder Ransomware 		3.0 M 15 ZeroCERT

7795 2023-10-11 18:36 typhon.exe  

3fad6c3e0604ee091f2b2a61a91e2b4d


Malicious Packer .NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Telegram Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee ComputerName DNS 		2 6 7 4.4 M 20 ZeroCERT

7796 2023-10-11 18:36 build.exe  

71535cb29a844c48321528d0fdfdb6d9


PE File PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency Check memory unpack itself Auto service Check virtual network interfaces ComputerName Firmware DNS 		1 2 4.8 M 35 ZeroCERT

7797 2023-10-11 18:12 bQ5J.exe  

82f98bb613a30f61ceb9ca7686f97847


PE File PE32 .NET EXE VirusTotal Malware Tofsee 		1 3 1 1.6 51 ZeroCERT

7798 2023-10-11 18:12 BYxYP9c1.ps1  

ee4cabf85331d01dcc5fa75be75b5598


Generic Malware Antivirus .NET DLL PE File DLL PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key crashed 		7.6 27 ZeroCERT

7799 2023-10-11 18:11 Ooseha.exe  

cb75f58a8d5e9ab38bf5e6afdb09d7c8


Formbook UPX .NET framework(MSIL) ScreenShot PWS AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		16 19 12 14 11.4 M 43 ZeroCERT

7800 2023-10-11 18:11 KjAvj6Vu.ps1  

ea8465175894190a7542d07bcea179b8


Generic Malware Antivirus .NET DLL PE File DLL PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key crashed 		7.0 27 ZeroCERT

keyword