popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7861 2023-10-10 17:00 i-5.8-6.Sakura  

934037ef82e243dea200d0567604bd2e


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.6 M 40 ZeroCERT

7862 2023-10-10 17:00 Prowf.exe  

3cef8b4a9c9507c112ca5449a03b03e9


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		2 1 2.8 M 48 ZeroCERT

7863 2023-10-10 14:06 setup294.exe  

cdab7ff04a8249fd9709106297453f03


Malicious Library UPX PE File PE32 DLL OS Processor Check Check memory Checks debugger Creates executable files unpack itself AppData folder 		2.6 M ZeroCERT

7864 2023-10-10 14:04 setup294.exe  

3c1be0e1c425fd4f3204a6f914021210


Malicious Library UPX PE File PE32 DLL OS Processor Check Check memory Checks debugger Creates executable files unpack itself AppData folder WriteConsoleW 		2.8 ZeroCERT

7865 2023-10-10 10:56 Contract-2.msi  

8e68a2869daf1ba9eaebf31d2d87973e


DarkGate Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware Buffer PE suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check Windows ComputerName 		9 4 3 4 4.8 M 1 ZeroCERT

7866 2023-10-10 10:48 zip.7z  

180d73f995d228c51498c4bfaf674d57


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		22 24 18 7 6.0 M 7 ZeroCERT

7867 2023-10-10 10:42 zip.7z  

854c628dca46bee73c0d90ce447d626e


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		21 24 18 7 5.6 M ZeroCERT

7868 2023-10-10 10:37 xxx.jpg.ps1  

afaec0cb0efc79d3c2effd5ea7c43cf9


Generic Malware Antivirus VirusTotal Malware Check memory Creates executable files unpack itself WriteConsoleW ComputerName 		2.0 M 13 ZeroCERT

7869 2023-10-10 10:36 Informazioni.txt.url  

0e20d831a104276c6b374d9c01cc9bde


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 5 ZeroCERT

7870 2023-10-10 10:33 EXX.vbs  

5d8410c20a0349ff3b5a346180455b76


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 1 ZeroCERT

7871 2023-10-10 10:33 ig5443.txt.exe  

6de05ad93daca1b6caf769826a404975


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 6.4 54 ZeroCERT

7872 2023-10-10 10:33 Documenti.url  

b4ae0d79ac63532fcf65494e208cb940


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 8 ZeroCERT

7873 2023-10-10 10:31 Cliente.url  

7c1010e02c22a4beea97a9c2ebb53d1e


AntiDebug AntiVM URL Format MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.4 ZeroCERT

7874 2023-10-10 10:30 cgeahsl8f7.exe  

62099107e7c4a2cf1914ec1fb022db4b


Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 56 ZeroCERT

7875 2023-10-10 10:30 ReklamX.ps1  

39aa0004099949044f6e47835101653d


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself Windows Cryptographic key 		1.4 15 ZeroCERT

keyword