popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8281 2023-12-21 17:09 file.rar  

6b0f8a62bc4fec439739c021445942f5


Stealc Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Open Directory Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Exploit RisePro DNS 		52 62 35 5 5.2 M guest

8282 2023-12-21 08:06 Pcpkjc.exe  

25bbcd3deb0ac8de0822a74f9d91b989


Hide_EXE AntiDebug AntiVM PE File PE64 .NET EXE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		6.6 M ZeroCERT

8283 2023-12-21 08:03 spfasiazx.exe  

aba50ae31c5df3ea0c2394c93d423afe


Formbook PE32 PE File .NET EXE PDB Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		1.6 M ZeroCERT

8284 2023-12-21 08:01 alphazx.exe  

1938e1ce8ff0107d18ae1972302d0060


Formbook PE32 PE File .NET EXE PDB Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 3.6 ZeroCERT

8285 2023-12-21 08:01 Mhgskyufhic.exe  

e5d75255dac28cd11b130b6471b258ee


Hide_EXE UPX PE File PE64 OS Processor Check Check memory Checks debugger unpack itself 		1.2 ZeroCERT

8286 2023-12-21 07:59 Microsoftdigitalwallettechnolo...  

f306b23f34ca0c9d62c74d45f399d21a


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Windows Exploit DNS crashed 		1 3 7 3.6 M ZeroCERT

8287 2023-12-21 07:59 Microsofttechnologyunavailable...  

70e00aa467b51abaa54b560b0d399010


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		1 3 5 3.6 M ZeroCERT

8288 2023-12-20 23:29 https://www.luxuryshield.org/?...  


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		3 2 2 4.2 guest

8289 2023-12-20 08:03 sd4.ps1  

16eedcc3da8cc730941c9a2f4adaaf7a


Generic Malware Antivirus Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 4.4 ZeroCERT

8290 2023-12-20 08:01 wlanext.exe  

c810e663dd2ada28c1bb8ee928f1372f


Generic Malware Malicious Library UPX Antivirus PE32 PE File powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key crashed 		3 6.0 M ZeroCERT

8291 2023-12-20 08:01 sd2.ps1  

b4127347d3d08d1a466289b2071e81e7


Generic Malware Antivirus Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 4.4 ZeroCERT

8292 2023-12-20 07:59 Voiceaibeta-5.13.exe  

ce3cce902aecf173e8899da746b45dc3


Gen1 Malicious Library UPX Malicious Packer Anti_VM PE File PE64 ftp OS Processor Check DLL PNG Format ZIP Format icon Malware Check memory Creates executable files Ransomware 		2.0 M ZeroCERT

8293 2023-12-20 07:59 helper.exe  

07bf5c0cec29332eaee4559712044afa


Generic Malware Malicious Library UPX Antivirus PE32 PE File OS Processor Check PowerShell Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows Browser Advertising ComputerName DNS Cryptographic key 		1 1 1 5.8 M ZeroCERT

8294 2023-12-20 07:57 voice5.13sert.exe  

b4b6bb1999d278b1eeb19783fce5cab4


Gen1 Malicious Library UPX Malicious Packer Anti_VM PE File PE64 ftp OS Processor Check DLL PNG Format ZIP Format icon Malware Check memory Creates executable files Ransomware 		2.0 ZeroCERT

8295 2023-12-20 07:57 agent3.ps1  

274945641a4f798a13bddec960a82670


Generic Malware Antivirus Check memory Checks debugger unpack itself WriteConsoleW Windows ComputerName Cryptographic key crashed 		2.2 M ZeroCERT

keyword