popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8056 2024-07-06 18:25 leva.exe  

de1f91ae5c55b1cbbc6d6561464d7d99


Gen1 EnigmaProtector Generic Malware Malicious Library UPX Malicious Packer AntiDebug AntiVM PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c Code Injection Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Stealc Stealer Windows Browser Email ComputerName DNS Software crashed plugin 		8 3 16 12.4 M 35 ZeroCERT

8057 2024-07-06 18:25 CryptoWall.exe  

919034c8efb9678f96b47a20fa6199f2


ScreenShot KeyLogger AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted IP Check DNS 		2 10 3 7.8 M 60 ZeroCERT

8058 2024-07-06 18:22 univ.exe  

217b817f890ef7fc49dc9207d55d2a01


GCleaner Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Malicious Traffic human activity check DNS 		1 1 1 1 3.4 M 57 ZeroCERT

8059 2024-07-06 18:21 inte.exe  

0da0d1efee859f1fe9cbd3bf5b428af6


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Malicious Traffic DNS 		1 1 1 1 2.6 M 58 ZeroCERT

8060 2024-07-06 18:20 mkl.js  

b0d0cfe2e3d3285272c07d5c32c96e44


AgentTesla Malicious Library Malicious Packer UPX PE File OS Memory Check .NET EXE PE32 OS Name Check OS Processor Check Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee Windows Gmail Browser Email ComputerName crashed keylogger 		2 2 9.6 14 ZeroCERT

8061 2024-07-06 18:18 datingloverstartingAgain.vbs  

66decb1e47d3173c8046c1a921244190

VirusTotal Malware DNS 		1 1 2.0 7 ZeroCERT

8062 2024-07-06 12:48 startupppp.bat  

f88fe8d8b25b85e6c7f7b31f71771193


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware Windows utilities WriteConsoleW Windows 		1.4 2 ZeroCERT

8063 2024-07-06 12:48 e_Scan_Statement0037829.lnk  

db2f7df2e40e5b8901b42d3f56a186fc


Generic Malware Antivirus Lnk Format GIF Format Creates shortcut unpack itself WriteConsoleW 		1.0 ZeroCERT

8064 2024-07-06 12:48 ukbvxz01.lnk  

5029bd93186f57a8f5b7978910999604


Generic Malware Antivirus Lnk Format GIF Format Creates shortcut unpack itself WriteConsoleW 		1.0 ZeroCERT

8065 2024-07-05 22:38 64.exe  

3e682955546fe3b6b1296a509ff80f65


Malicious Library Malicious Packer UPX PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware PDB MachineGuid Check memory Checks debugger Creates executable files unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Browser 		4.8 M 48 guest

8066 2024-07-05 22:38 64.exe  

3e682955546fe3b6b1296a509ff80f65


Malicious Library Malicious Packer UPX PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware PDB MachineGuid Check memory Checks debugger Creates executable files unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Browser 		4.8 M 48 guest

8067 2024-07-05 17:50 РОСКОМНАДЗОР письмо Google Ana...  

adc398c253cff3c1acf9a48e78f5775d


PDF VirusTotal Malware 		0.4 1 guest

8068 2024-07-05 15:56 64.exe  

3e682955546fe3b6b1296a509ff80f65


Malicious Library Malicious Packer UPX PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware PDB MachineGuid Check memory Checks debugger Creates executable files unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		1 5.4 M 48 ZeroCERT

8069 2024-07-05 15:54 Report.ps1  

054618073752ea5823c98130114a3241


Hide_EXE Generic Malware task schedule Antivirus KeyLogger AntiDebug AntiVM Malware download AsyncRAT NetWireRC VirusTotal Malware Code Injection Check memory buffers extracted unpack itself DDNS 		2 3 7.2 10 ZeroCERT

8070 2024-07-05 15:01 Scandoc1114.exe  

1028a0939cb0ce3475e93dcab08ebba8


Process Kill Generic Malware Suspicious_Script_Bin Malicious Library FindFirstVolume CryptGenKey UPX PE File PE32 Device_File_Check OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		1 4 5 9.4 M 51 ZeroCERT

keyword