popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8011 2024-07-08 14:09 INVESTIGATION_OF_SEXUAL_HARASS...  

9345d52abd5bab4320c1273eb2c90161


ZIP Format Word 2007 file format(docx) VirusTotal Malware unpack itself Tofsee 		2 4 1 2.0 4 ZeroCERT

8012 2024-07-08 13:29 node.js.exe  

9e6ba754b50c865d54a69075a65620ae


Gen1 RedLine stealer NSIS Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) Obsidium protector Antivirus Anti_VM Javascript_Blob PE File PE32 DLL PE64 OS Processor Check ftp VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder Ransomware 		4.2 1 ZeroCERT

8013 2024-07-08 11:11 archive.rar  

2074be740d489e298715968ed68fd122


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check Tofsee Windows Discord DNS 		10 26 18 7 5.2 M ZeroCERT

8014 2024-07-08 10:36 App.dll  

1afdf73c0d1ba126c63927b423c55205


Generic Malware Malicious Library ASPack UPX PE File DLL PE64 OS Processor Check PDB Checks debugger crashed 		0.6 ZeroCERT

8015 2024-07-08 10:04 Update.js  

affe7c07da3776a191c69b73e50d491a

VBScript wscript.exe payload download Tofsee crashed Dropper 		1 2 2 10.0 guest

8016 2024-07-08 09:54 Client.exe  

86108d3bcc19fe774cc81b71494d31f9


Generic Malware Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check PNG Format Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Browser Email ComputerName DNS Software crashed 		1 4 3 7.8 M 61 ZeroCERT

8017 2024-07-08 09:52 my.exe  

6470b936622d9502880cae6452d1bb48


Generic Malware Malicious Library Malicious Packer Antivirus UPX PE File PE64 ftp OS Processor Check VirusTotal Malware WriteConsoleW DNS 		2 4.0 27 ZeroCERT

8018 2024-07-08 09:52 win.exe  

f0e6f9c7b9ddc461c6929d4765a15eaa


Generic Malware Malicious Library Malicious Packer Antivirus UPX PE File ftp PE32 OS Processor Check VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 3.6 41 ZeroCERT

8019 2024-07-08 09:48 update.exe  

f8ae25eb2bef827759f8cd837ad85bda


Browser Login Data Stealer Generic Malware Malicious Library Downloader Malicious Packer UPX PE File PE64 OS Processor Check Browser Info Stealer VirusTotal Malware Malicious Traffic RWX flags setting sandbox evasion VMware Windows Update Browser DNS crashed 		1 1 2 5.6 M 45 ZeroCERT

8020 2024-07-08 09:48 1.exe  

ed44c98c40576ef50f6abcf6e40c71d7


UPX PE File PE32 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		1 4.0 M 23 ZeroCERT

8021 2024-07-08 09:46 Installer.exe  

bed8cdced2d57be2bd750f0f59991ecd


Malicious Library UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Cryptocurrency wallets Cryptocurrency Telegram AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS 		4 4 9.8 M 63 ZeroCERT

8022 2024-07-08 09:46 build.exe  

7081e613321921500b70899fddb56a4d


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 M 63 ZeroCERT

8023 2024-07-08 09:44 windows_update.exe  

14129aa32bbd6bf03d3cde8837119e2a


UPX PE File PE64 VirusTotal Malware 		2.2 M 27 ZeroCERT

8024 2024-07-08 09:44 tool.exe  

34c704347497551c5593eeabebb7b6ce


UPX PE File PE64 VirusTotal Malware suspicious privilege Windows utilities WriteConsoleW Windows DNS 		2 5.2 M 44 ZeroCERT

8025 2024-07-08 09:44 igccu.exe  

c3ebea7cd7e96887d0fffff22bf00101


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File PE32 Device_File_Check OS Processor Check DLL Browser Info Stealer VirusTotal Malware Checks debugger buffers extracted Creates executable files unpack itself AppData folder Browser 		15 17 7.2 52 ZeroCERT

keyword