popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8041 2024-07-07 19:03 2EU.file.exe  

f7ea17cd71f263659d0ee0b82a95fbaf


Malicious Library UPX PE File PE64 ftp OS Processor Check VirusTotal Malware PDB 		0.6 2 ZeroCERT

8042 2024-07-07 18:59 SERVE.vbs  

3c12d58060963c9a6190f3803d0bc6fe

VirusTotal Malware VBScript wscript.exe payload download DNS crashed Dropper 		1 1 10.0 M 7 ZeroCERT

8043 2024-07-07 18:57 ghjkl.exe  

a2a9c309c5300a53d2c2fc41b71b174b


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.6 M 55 ZeroCERT

8044 2024-07-07 18:55 buildj.exe  

7debc473f9ec83c3d000a57466eab9b2


Vidar Generic Malware Malicious Library Antivirus UPX AntiDebug AntiVM PE File PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		3 5 3 1 11.0 M 58 ZeroCERT

8045 2024-07-07 18:53 UGcLEmRAhjNb.exe  

f2a5c7e8313862aca9b7a6314ca73f3a


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware crashed 		1.4 48 ZeroCERT

8046 2024-07-07 18:50 offic%E8%A1%A8%E6%A0%BCluck.ex...  

06592a8ca068935d98a5ada152e3393d


UPX PE File PE64 VirusTotal Malware RCE 		2.6 M 49 ZeroCERT

8047 2024-07-07 18:48 qwerty.ps1  

b099d0ec774fccc05b662d86eaba027a


Hide_EXE Generic Malware Malicious Packer UPX Antivirus AntiDebug AntiVM PE File PE32 VirusTotal Malware powershell Buffer PE Code Injection Check memory buffers extracted heapspray Creates executable files RWX flags setting unpack itself powershell.exe wrote malicious URLs WriteConsoleW Windows crashed 		4 2 2 2 10.0 M 29 ZeroCERT

8048 2024-07-07 18:48 PO%2012.04%20pdf.exe  

d90a72256615ac3ba74c924012fea42c


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File PE32 Device_File_Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		6.0 53 ZeroCERT

8049 2024-07-07 18:48 asdfg.exe  

a2a9c309c5300a53d2c2fc41b71b174b


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.6 M 55 ZeroCERT

8050 2024-07-06 18:35 build.exe  

2dece3353cda5321fff7c92a697c37ee


Vidar Generic Malware Malicious Library Antivirus UPX AntiDebug AntiVM PE File PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		3 5 3 1 11.0 M 60 ZeroCERT

8051 2024-07-06 18:33 CoronaVirus.exe  

055d1462f66a350d9886542d4d79bc2b


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself suspicious process sandbox evasion shadowcopy delete installed browsers check Ransomware Windows Browser ComputerName RCE 		9.6 M 63 ZeroCERT

8052 2024-07-06 18:31 RedLineStealer.exe  

a957dc16d684fbd7e12fc87e8ee12fea


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.4 M 62 ZeroCERT

8053 2024-07-06 18:30 stealc_zov.exe  

253ccac8a47b80287f651987c0c779ea


Gen1 Generic Malware Malicious Library UPX Malicious Packer PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software plugin 		8 1 16 8.4 M 65 ZeroCERT

8054 2024-07-06 18:29 newbuild.exe  

9ab4de8b2f2b99f009d32aa790cd091b


RedLine stealer RedlineStealer Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6 6.2 M 63 ZeroCERT

8055 2024-07-06 18:27 setup.exe  

6b189fc6ddde33cba5c63e1dfec82b2a


Malicious Library PE File PE32 VirusTotal Malware Checks debugger WMI Creates executable files RWX flags setting unpack itself Checks Bios anti-virtualization ComputerName DNS 		1 5.2 M 37 ZeroCERT

keyword