popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8251 2023-09-26 09:28 5vy.lnk.lnk  

86b6cf70293cde65ebf86dce611acd51


Generic Malware AntiDebug AntiVM GIF Format Lnk Format VirusTotal Malware Code Injection Malicious Traffic Creates shortcut unpack itself suspicious process WriteConsoleW DNS 		1 1 2 4.2 7 ZeroCERT

8252 2023-09-26 09:23 Jv.xll  

f7a95d9853bbf73d695908480fa3ace2


PE File DLL PE64 		ZeroCERT

8253 2023-09-26 07:31 setup.exe  

c5d41d92dac11a02d31cc73c5f450fa5


Malicious Library PE File PE32 VirusTotal Malware WMI Creates executable files RWX flags setting Checks Bios anti-virtualization ComputerName 		4.0 M 30 ZeroCERT

8254 2023-09-25 18:38 saddsd.exe  

e9bbf60a02ceb5cbb6b712c1f0d18f2b


Generic Malware Anti_VM AntiDebug AntiVM PE File PE32 icon Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VMWare Check virtual network interfaces WriteConsoleW VMware anti-virtualization installed browsers check Windows Browser Firmware Cryptographic key crashed 		14.6 45 ZeroCERT

8255 2023-09-25 18:15 passw1234.7z  

4a757eead2734a30ba2a1dfd95c3ca7f


PrivateLoader Stealc Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Dridex Malware c&c Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord RisePro Trojan DNS Downloader 		57 104 50 21 6.8 M ZeroCERT

8256 2023-09-25 17:13 conhost.exe  

c853a830fa2530a233e4a1eaf84b4273


Malicious Library UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.4 M 45 ZeroCERT

8257 2023-09-25 17:11 docdimt20230925.exe  

d151945da40824dc4231b193fe65b4fc


PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		13.6 ZeroCERT

8258 2023-09-25 17:10 docutc20230925.exe  

aa9dd2c152d86d81236ad564d3c2a078


Malicious Library UPX Malicious Packer PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		5 5 14.6 M ZeroCERT

8259 2023-09-25 17:09 dochus20230925.exe  

363044c48c8d035c08cddcdb22bb0838


PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		4 5 15.0 ZeroCERT

8260 2023-09-25 17:07 docdad20230925.exe  

a2144ec73f793ed49255c96839a7a1f6


PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 4 4 17.0 41 ZeroCERT

8261 2023-09-25 17:07 saham.apk  

2678ce7e43d9ef7dd7e06d5feeea532e


ZIP Format VirusTotal Malware 		0.6 M 14 ZeroCERT

8262 2023-09-25 17:05 docrw20230925.exe  

be1b63ef6abc588245cdf4f346b26154


Malicious Library UPX Malicious Packer .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 8 8 16.6 M ZeroCERT

8263 2023-09-25 17:05 docjhny20230925.exe  

eaf2b6671ec5dded98f2a7fe6aa603c7


Malicious Library UPX Malicious Packer PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		5 5 14.6 M ZeroCERT

8264 2023-09-25 17:03 docnic20230925.exe  

010ef94907f5876e46be0ed87689fde9


Malicious Library UPX PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		5 4 15.2 ZeroCERT

8265 2023-09-25 17:02 app.apk  

ec39111f60fb5de68e7efeefdada41ee


ZIP Format VirusTotal Malware 		0.8 M 20 ZeroCERT

keyword