popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8446 2023-09-21 09:35 Abzyvhxf.exe  

7044e350d5ce87c637beb058755884c2


UPX PE File PE32 .NET EXE OS Processor Check Check memory Checks debugger unpack itself ComputerName 		1.0 ZeroCERT

8447 2023-09-21 09:33 okwugwwoooooFile.vbs  

b3cccc4edd38f55ec657d671fa6eb95a


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 8 ZeroCERT

8448 2023-09-21 09:33 TiWorker.exe  

043e70250aeeec512af0393baf488866


LokiBot .NET framework(MSIL) Socket PWS DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs suspicious TLD installed browsers check Browser Email ComputerName DNS Software 		1 2 9 13.8 34 ZeroCERT

8449 2023-09-21 09:30 BestSoftware.exe  

1c9cb19f72b337353fab5826b145b2f3


.NET framework(MSIL) PWS SMTP AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 11.4 M 47 ZeroCERT

8450 2023-09-21 09:30 portfolio.url  

ab427bde003e2f9b64972710d82c99c3


AntiDebug AntiVM URL Format MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.4 ZeroCERT

8451 2023-09-21 09:30 TiWorker.exe  

e10fec549c39c3274dcda749ec3a7119


.NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser 		5 5 10.6 M 47 ZeroCERT

8452 2023-09-21 09:21 name.exe  

4de0852d1496c803b17e3990f0411c54


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB 		1.6 31 ZeroCERT

8453 2023-09-21 09:20 pass_setup1234.7z  

c0a9b3aec9fea6881332adfe384232c3


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro Trojan DNS Downloader 		44 79 40 12 5.8 M ZeroCERT

8454 2023-09-21 09:18 ienwscx.exe  

710be6c7edbd56231c80ea627e7614c9


NSIS Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself AppData folder Windows crashed 		4.6 M 41 ZeroCERT

8455 2023-09-21 09:17 AnyDesk.exe  

6e48a107a315a287e1e37592177cffec


Gen1 SmokeLoader RedLine stealer NSIS Generic Malware Suspicious_Script Downloader Malicious Library UPX Admin Tool (Sysinternals etc ...) Malicious Packer Antivirus Obsidium protector ASPack Anti_VM Javascript_Blob PE File ftp PE32 DLL OS Processor Check VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder Ransomware 		4.6 M 25 ZeroCERT

8456 2023-09-21 09:16 TiWorker.hta  

708ae6bdeacfb88deca920e606bff2fd


Generic Malware Antivirus AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		1 7.0 9 ZeroCERT

8457 2023-09-21 09:13 TiWorker.exe  

accd49056a71495f54d8d83ac2a3e901


NSIS Malicious Library UPX Admin Tool (Sysinternals etc ...) PE File PE32 OS Processor Check VirusTotal Malware Check memory Creates executable files unpack itself AppData folder crashed 		3.8 35 ZeroCERT

8458 2023-09-21 05:10 http://edge-026.defra2.ce.appl...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.2 guest

8459 2023-09-20 18:12 omego.exe  

72e4c036b96efd053d4233076fc4d426


Admin Tool (Sysinternals etc ...) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 10.4 M 37 ZeroCERT

8460 2023-09-20 18:09 smss.exe  

ec1b1e9118b85599e702620abf7e9301


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		1 1.4 M 35 ZeroCERT

keyword