popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8431 2023-09-21 09:48 omob.vbs  

51c03a309d16578fe5a97464df18cac9


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 8 ZeroCERT

8432 2023-09-21 09:47 eveningmmeddddFile.vbs  

62154436f26a9ce3557b89b54e54fe16


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 3 ZeroCERT

8433 2023-09-21 09:46 idex.vbs  

3a386e7b334d9214f8d5fcf3f6876fd3


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 8 ZeroCERT

8434 2023-09-21 09:45 aktivosssssssfileapamaFile.vbs  

cd664601408fb5dac516050fb44fe31c


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 1 ZeroCERT

8435 2023-09-21 09:44 irrkt.exe  

f2b5bfad4a3b0efd8aff6cd50c4f4e4b


PE File PE32 .NET EXE VirusTotal Malware Tofsee DNS 		1 5 1 2.2 M 47 ZeroCERT

8436 2023-09-21 09:44 jokiulob.vbs  

ddf4bc91c949a6dfe97246d424ce6a2e


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 8 ZeroCERT

8437 2023-09-21 09:43 wininit.exe  

d54ddeb1ceaa4b97d777db0335765e31


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder suspicious TLD Browser DNS 		13 12 2 9 11.0 M 35 ZeroCERT

8438 2023-09-21 09:43 mohammmeddddFile.vbs  

ac706ae911a9abbe20f39aede390f201


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 3 ZeroCERT

8439 2023-09-21 09:41 GWA.vbs  

e2782eab20480b1650cd78de803acd82


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 1 ZeroCERT

8440 2023-09-21 09:40 HVD.vbs  

4a59ccc0ed465bacc7d52dfb498ad113


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 3 ZeroCERT

8441 2023-09-21 09:39 1.exe  

3e0fe762ff4de77422e0da2f8460431a


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB Remote Code Execution 		2.0 M 50 ZeroCERT

8442 2023-09-21 09:37 TiWorker.hta  

328e0141e999dfe62d9429c5685aabd2


Generic Malware Antivirus AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		1 7.0 M 7 ZeroCERT

8443 2023-09-21 09:37 kellyzx.exe  

c9073e82ea54dc807fb8c89d205ef7f5


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 21 ZeroCERT

8444 2023-09-21 09:35 maxlobbing2.1.exe  

8d7eea4fa1b573b722cac003a8aa205f


NSIS Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 8.4 M 46 ZeroCERT

8445 2023-09-21 09:35 Bitter.exe  

17fa8319d0f676b0a4e69d629e3b46a3


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check VirusTotal Malware Remote Code Execution crashed 		1.8 24 ZeroCERT

keyword