popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8176 2023-09-28 08:38 bestunderstandingresspro.exe  

c64258c1d7fef95b76f9aca64d707ac7


Gen1 Emotet Malicious Library UPX PE File PE64 CAB VirusTotal Malware AutoRuns PDB Creates executable files Windows Remote Code Execution 		3.0 14 ZeroCERT

8177 2023-09-28 08:37 dyke.txt.exe  

5b3c222b7554df5dd2dfe06f4ac288e8


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName crashed 		5.0 56 ZeroCERT

8178 2023-09-28 08:27 imolight2.1.exe  

56a626b9244c18ac768b5d3db7e014ed


NSIS Malicious Library UPX Anti_VM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder human activity check Windows ComputerName DNS 		1 10.2 49 ZeroCERT

8179 2023-09-28 08:26 unqgl.txt.exe  

af158ce8c4950113f3886aa922725b50


Malicious Packer PE File PE32 .NET EXE 		ZeroCERT

8180 2023-09-28 03:01 Szun-ce - A háború művészete.p...  

7fcb7c5a54d6e7aeee4f3c4cc80c7cb0


PDF 		guest

8181 2023-09-27 18:45 gate9_pass1234.7z  

fb744c58353b153a548fd04fd959b232


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro Trojan DNS Downloader 		44 89 41 22 7.8 M ZeroCERT

8182 2023-09-27 17:39 asca1ex.exe  

bf58b6afac98febc716a85be5b8e9d9e


Malicious Library PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 6.4 M 57 ZeroCERT

8183 2023-09-27 17:36 rh111.exe  

1b87684768db892932be3f0661c54251


UPX .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check FlawedAmmyy VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 50 ZeroCERT

8184 2023-09-27 17:34 rh_0.4.9rc1123.exe  

1cf749dd7209e826e36d8ece08aa6a7a


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware WMI RWX flags setting unpack itself ComputerName crashed 		4.2 M 61 ZeroCERT

8185 2023-09-27 17:34 clean.exe  

9fa10337d494e4b832b790bd53352fc4


Gen1 Emotet Malicious Library UPX PE File PE32 CAB VirusTotal Malware unpack itself AntiVM_Disk VM Disk Size Check Remote Code Execution crashed 		2.0 4 ZeroCERT

8186 2023-09-27 16:26 Hu.pdf  

59f3ad81657e7bf282b2f89f6f238185


PDF Suspicious Link PDF 		1 guest

8187 2023-09-27 14:42 ff2177c078dfed4b10a0214acefabf...  

4df9fa7cef7bd7e19456e219b135ae69


Malicious Library UPX .NET framework(MSIL) Socket ScreenShot Steal credential DNS AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check Browser Info Stealer Malware download VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications malicious URLs AntiVM_Disk sandbox evasion anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Browser RisePro Email ComputerName DNS 		1 5 6 14.8 31 ZeroCERT

8188 2023-09-27 14:25 GXQ.pdf.lnk  

a86dd3a01720be4344548792139aa419


Generic Malware AntiDebug AntiVM Lnk Format GIF Format Malware Code Injection Malicious Traffic Creates shortcut unpack itself suspicious process WriteConsoleW DNS crashed 		1 1 2 4.0 ZeroCERT

8189 2023-09-27 14:25 UTA.pdf.lnk  

1bce56d959ee53f48cc0cced5acbfa2c


Generic Malware AntiDebug AntiVM Lnk Format GIF Format Malware Code Injection Malicious Traffic Check memory Creates shortcut unpack itself suspicious process WriteConsoleW DNS crashed 		1 1 2 4.2 ZeroCERT

8190 2023-09-27 14:24 OT.pdf.lnk  

220870fa38f822a0403218114a08b31d


Generic Malware AntiDebug AntiVM Lnk Format GIF Format Code Injection Creates shortcut ICMP traffic suspicious process WriteConsoleW DNS 		1 1 4.4 ZeroCERT

keyword