popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8146 2024-07-04 07:38 ABC.exe  

2808310786effc87a4359c778a73a7ee


UPX PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself ComputerName 		2.8 42 ZeroCERT

8147 2024-07-04 07:36 injector.exe  

509c110ee54d73c3398140a5eb78c45a


NSIS Malicious Library UPX Confuser .NET PE File PE32 .NET EXE VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder ComputerName DNS crashed 		1 2 5.2 57 ZeroCERT

8148 2024-07-04 02:39 http://py.pl/I7mIC  

6cb7e9e8e7161d8a30c49a4228aafaaf


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File PNG Format JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 5.6 guest

8149 2024-07-03 19:10 file_xgep41gp.dyp.txt.ps1  

b75a49ff9b2f445e17519d2e743fe1b4


Generic Malware Antivirus Malware powershell Malicious Traffic unpack itself Check virtual network interfaces Tofsee ComputerName 		2 2 1 1 3.2 M ZeroCERT

8150 2024-07-03 19:02 file_ahstznsa.ob0.txt.ps1  

478b1ac88592f59f8a1d4cb790120c38


Generic Malware Antivirus VirusTotal Malware powershell Malicious Traffic unpack itself Check virtual network interfaces Tofsee ComputerName 		2 2 1 1 3.6 M 9 ZeroCERT

8151 2024-07-03 18:50 poop.exe  

42e52b8daf63e6e26c3aa91e7e971492


PE File PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Check memory Creates shortcut Creates executable files Ransomware Browser 		4.6 M 68 ZeroCERT

8152 2024-07-03 18:47 uho.uouo.uououo.doc  

9904916ce3549610216e99d83e7e2135


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit Java DNS crashed 		3 4 4 1 5.0 M 33 ZeroCERT

8153 2024-07-03 18:46 client_win.exe  

9f478308a636906db8c36e77ce68b4c2


Gen1 Generic Malware Malicious Library UPX Anti_VM PE File PE64 OS Processor Check DLL ZIP Format VirusTotal Malware Check memory Creates executable files WriteConsoleW 		1.6 26 ZeroCERT

8154 2024-07-03 18:44 123.exe  

4a24aad5274be7e1fd5e3ef95ea20f8f


Gen1 Generic Malware Downloader Malicious Library UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 OS Processor Che VirusTotal Malware AutoRuns PDB Code Injection Creates executable files Windows utilities WriteConsoleW Windows RCE crashed 		6.0 47 ZeroCERT

8155 2024-07-03 18:43 OPERATIONAL_MOAT.exe  

fe630e60d070ead8f5421d4006872435


Malicious Packer UPX PE File PE64 VirusTotal Malware Checks debugger DNS 		1 1 4.4 45 ZeroCERT

8156 2024-07-03 18:41 ok.exe  

2a5bdb0a785762ab4982d360bd4c37e5


Malicious Packer UPX PE File PE64 VirusTotal Malware Checks debugger DNS 		1 1 4.2 38 ZeroCERT

8157 2024-07-03 18:41 wmi.jpg.exe  

1953c97029337ec04a8d4b69911d843f


UPX PE File PE32 Malware download VirusTotal Malware SMB Traffic Potential Scan AutoRuns Malicious Traffic Check memory Creates executable files ICMP traffic RWX flags setting Windows utilities WriteConsoleW Firewall state off IP Check Windows DNS DDNS Downloader 		5 27 12 11.2 M 40 ZeroCERT

8158 2024-07-03 18:40 toi.txt.exe  

5de123afed9669f8abd8994820591ec7


Generic Malware PE File DLL PE64 VirusTotal Malware crashed 		1.4 M 45 ZeroCERT

8159 2024-07-03 18:38 EERIE_EAVE.exe  

e515e4872f4891fb598b503c34036b8c


Malicious Packer UPX PE File PE64 VirusTotal Malware Checks debugger Check virtual network interfaces DNS 		1 1 4.8 40 ZeroCERT

8160 2024-07-03 18:38 lumma0207.exe  

168c5908924803d268d26965c32a5620


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself crashed 		2.2 26 ZeroCERT

keyword