popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8461 2023-09-20 18:07 clip64.dll  

03f32c1a791dd8e77edfa3461e31abd1


Amadey Malicious Library Admin Tool (Sysinternals etc ...) UPX PE File DLL PE32 OS Processor Check VirusTotal Malware PDB 		1.4 M 56 ZeroCERT

8462 2023-09-20 18:07 cred64.dll  

be88f13ad2e21025d52e61a57bc1fe12


Browser Login Data Stealer Malicious Library UPX PE File DLL PE64 OS Processor Check VirusTotal Malware PDB 		1 1.6 M 45 ZeroCERT

8463 2023-09-20 18:07 calc2.exe  

3d4e0dc6f80820315996f16eb5a5f03b


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB 		1 1.6 M 33 ZeroCERT

8464 2023-09-20 18:05 TiWorker.exe  

75b192f9b810dedde93595a8a1b1dd8d


LokiBot .NET framework(MSIL) Socket PWS DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software crashed 		1 2 7 13.0 M 18 ZeroCERT

8465 2023-09-20 18:05 hh.txt.ps1  

4735c60f2a61a338443ce8091601ca23


Generic Malware Antivirus powershell Check memory unpack itself powershell.exe wrote WriteConsoleW Windows Cryptographic key 		1 2.2 ZeroCERT

8466 2023-09-20 18:05 harbar.exe  

cc735bbb997be4520efb4943f2db3f6c


Emotet Gen1 Malicious Library UPX Confuser .NET AntiDebug AntiVM PE File PE32 .NET EXE DLL MZP Format OS Processor Check CHM Format PE64 DllRegisterServer dll VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder WriteConsoleW Tofsee Windows ComputerName DNS crashed 		3 4 12.2 M 48 ZeroCERT

8467 2023-09-20 18:04 Rzcjkedka.exe  

cd47b64e420b472464001891ff312ff6


AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		21 23 11 10.8 M 17 ZeroCERT

8468 2023-09-20 18:03 wealthzx.exe  

aa8c14edf65d09f549ac88306d2e8610


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Browser Email ComputerName Software crashed 		2 2 11.4 M 23 ZeroCERT

8469 2023-09-20 18:01 Owpxkxlhneicvr.scr  

79b7474ded312cda4a0bd477ddf78378


Malicious Library UPX PE File PE32 MZP Format URL Format Remcos VirusTotal Malware Malicious Traffic Check memory unpack itself Windows keylogger 		2 5 1 3.6 20 ZeroCERT

8470 2023-09-20 18:00 TiWorker.exe  

9809924a1fb0082898813c23dbc84b24


Malicious Library PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself suspicious TLD DNS 		21 24 6 4.0 M 53 ZeroCERT

8471 2023-09-20 17:59 ark.exe  

9dadfc8f01d8b789ce9267cc188591bb


Admin Tool (Sysinternals etc ...) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		3 4 11.2 M 41 ZeroCERT

8472 2023-09-20 17:58 SBqxEB20ZJgWYrR.exe  

c6f8afa65badddd3590c98f05c766c01


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Disables Windows Security Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 3 15.4 M 24 ZeroCERT

8473 2023-09-20 15:39 bypass.ps1.exe  

6efe15382531ae994f2f220046421b1d


PE File PE64 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 48 ZeroCERT

8474 2023-09-20 15:31 bypass.ps1  

1c5d05def6e3baabe8da94a3d275c5e5


Hide_EXE Generic Malware Antivirus PE File PE64 .NET EXE VirusTotal Malware powershell MachineGuid Check memory Checks debugger Creates executable files unpack itself powershell.exe wrote 		4.2 M 7 ZeroCERT

8475 2023-09-20 11:12 73243017.exe  

be527f26f13962e89509dd096166f55e


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		1.4 M 30 ZeroCERT

keyword