popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8341 2023-12-18 07:50 TierDiagnosis.exe  

2e600b1ff7cd82c6402bb280720ced61


Generic Malware task schedule Downloader Malicious Library Admin Tool (Sysinternals etc ...) UPX KeyLogger Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Windows ComputerName 		1 11.8 M 48 ZeroCERT

8342 2023-12-18 07:50 wlanext.exe  

d28a7016ca5651a4a4a270883792ebb7


Generic Malware Malicious Library UPX Antivirus PE32 PE File powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		5.4 M ZeroCERT

8343 2023-12-15 19:04 adobe.exe  

f74eaaf7cee624885219e992887a1689


Emotet Gen1 Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE32 PE File MZP Format DLL OS Processor Check DllRegisterServer dll PE64 wget ZIP Format Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName crashed 		4.2 ZeroCERT

8344 2023-12-15 19:03 setup294.exe  

c83e00b6e41e1a56fc6908e165ab4cb5


Malicious Library UPX AntiDebug AntiVM PE32 PE File DLL OS Processor Check Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder 		4.0 ZeroCERT

8345 2023-12-15 19:00 2.exe  

f89eaa7fbb0a8b2e24ad2671d833b15f


Malicious Library VMProtect PE32 PE File Remote Code Execution crashed 		1.8 ZeroCERT

8346 2023-12-15 18:22 Delivery_Data.jar  

eea444443394d25856661dc1cfbbff20


Malicious Library MSOffice File VirusTotal Malware Check memory heapspray unpack itself Java 		2.4 M 20 ZeroCERT

8347 2023-12-15 18:20 svchost.exe  

d973e5134f0a64365f35d158d23c4ba1


Malicious Packer Antivirus .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger RWX flags setting unpack itself 		2.8 M 36 ZeroCERT

8348 2023-12-15 18:18 DNS1.exe  

6a23b6e2536f7027a8506c87245eea5d


PE32 PE File VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Creates executable files unpack itself suspicious TLD Windows DNS 		2 6 4 6.4 M 59 ZeroCERT

8349 2023-12-15 18:16 Dvvyjoogg.exe  

4a9119576c02d6707f5914f5ea020730


PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.4 M 32 ZeroCERT

8350 2023-12-15 18:16 tSV0dUC1pYGjOvI.exe  

f0b67e5a152e990ffc32d8364da1c8b2


PE32 PE File .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key crashed 		5.0 M 29 ZeroCERT

8351 2023-12-15 17:45 Voice-Ai-beta.exe  

db24ccd5edd193c3de7e8324af4df458


Gen1 Malicious Library UPX Malicious Packer Anti_VM PE File PE64 OS Processor Check DLL PNG Format ZIP Format icon VirusTotal Malware Check memory Creates executable files Ransomware 		2.6 18 ZeroCERT

8352 2023-12-15 17:45 release.rar  

57ab5e01e6e92d13ae33e587004ad918


Stealc PrivateLoader Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Vidar Glupteba Open Directory Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Exploit Browser RisePro DNS Downloader plugin 		62 75 62 12 7.6 M ZeroCERT

8353 2023-12-15 16:22 128.5.14-package.hta  

715d2502c51eddfd399a63042a259634


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 ZeroCERT

8354 2023-12-15 15:21 microsoftdeletedprofilehistory...  

1578764a625e6b24828568abf19b591a


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware AgentTesla Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		1 3 7 4.2 M 31 ZeroCERT

8355 2023-12-15 15:14 winpack-en-18f036cdef58fd.url  

07419ec9bbd2759b58f49acd28287cd8


AntiDebug AntiVM URL Format VirusTotal Malware Code Injection Malicious Traffic unpack itself Windows utilities Windows DNS 		3 1 2 3.6 M 3 ZeroCERT

keyword