popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7951 2024-07-10 07:36 2.exe  

536b6b4464f2476d693267bd71d9a1ee


Lumma Stealer UPX PE File PE32 VirusTotal Malware 		1.2 52 ZeroCERT

7952 2024-07-09 21:37 https://l.facebook.com/l.php?u...  

c896711e056cb6f0df71a7c8e0fac71c


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		13 10 2 4.8 guest

7953 2024-07-09 21:37 https://www.facebook.com/38022...  

1248cb643e2592a6bcce60711dc10617


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format icon MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		10 8 2 4.2 guest

7954 2024-07-09 21:31 https://l.facebook.com/l.php?u...  

2bec4686337f2e399b71386575535145


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		12 10 2 4.2 guest

7955 2024-07-09 18:49 DS_Store.exe  

14df06539b72837adb9f8d13cfcea6db


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware PDB RCE 		0.8 7 ZeroCERT

7956 2024-07-09 18:47 DS_Store.exe  

14df06539b72837adb9f8d13cfcea6db


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware PDB RCE 		0.8 7 ZeroCERT

7957 2024-07-09 18:41 2aba0c4cfb95beba9ddb8208234f1b...  

432230af1d59dac7dfb47e0684807240


Escalate priviledges PWS KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself DNS 		3 4.2 5 ZeroCERT

7958 2024-07-09 18:21 소명자료 목록.hwp.lnk  

a330b834cc2ec19c3e151f07fb4b877c


Generic Malware Antivirus AntiDebug AntiVM HWP MSOffice File Lnk Format GIF Format VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 6.0 24 ZeroCERT

7959 2024-07-09 18:16 근로신청서 관련의 건.docx.lnk  

21d12dc7f08752293847af6ed19df0e3


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 8 ZeroCERT

7960 2024-07-09 17:10 fromblueRmilxch.exe  

0234bff4bd4e6dd7a80d3fde4f12fc09


Malicious Library Malicious Packer .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 35 ZeroCERT

7961 2024-07-09 17:08 trc.exe  

74758f61067ea9fa0e2a4593920ed0f2


Generic Malware Malicious Library Malicious Packer UPX Anti_VM PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.4 M 28 ZeroCERT

7962 2024-07-09 17:06 runerdata.exe  

99c919281e619f24edc578e427433f7b


Malicious Library Malicious Packer .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 38 ZeroCERT

7963 2024-07-09 17:06 build1111.exe  

dea351e95b2d5b0a6b3911d531315550


Generic Malware Malicious Library PE File PE64 VirusTotal Malware Check memory unpack itself 		1.2 17 ZeroCERT

7964 2024-07-09 14:18 Update_old.js  

affe7c07da3776a191c69b73e50d491a

VBScript wscript.exe payload download Tofsee crashed Dropper 		2 2 10.0 guest

7965 2024-07-09 12:06 download.php  

019defe59b733d4d86a895702873ff07


Malicious Library PE File PE32 VirusTotal Malware RCE 		2.0 M 27 ZeroCERT

keyword