Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8626 2023-09-14 19:24 wc4aw1t506.dll  

e4919447b9ea5c4f02a0746ab64f8e7e


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware unpack itself Remote Code Execution
1.8 M 16 ZeroCERT

8627 2023-09-14 19:22 hk1c9y18em.dll  

a6ac1a8bb63362ed7515f2ca02fb52be


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware unpack itself Remote Code Execution
1.8 M 16 ZeroCERT

8628 2023-09-14 19:22 wininit.exe  

d16abef6797eb2213c83e9580a749314


Formbook .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser DNS
18 15 2 12 11.0 M 46 ZeroCERT

8629 2023-09-14 19:22 i9ien8gksg.dll  

fcbb53724b1df93a5d1fc45bb55b9069


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware unpack itself Remote Code Execution
1.8 M 15 ZeroCERT

8630 2023-09-14 19:19 file.exe  

03e76b7a2245db6a2b342dae3fb3c7ed


NSIS UPX Malicious Library PE File PE32 OS Processor Check Browser Info Stealer VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder suspicious TLD Java Browser DNS
26 22 5 5.6 38 ZeroCERT

8631 2023-09-14 19:18 Build.exe  

e04f4435560f78707d402c06b8deb8dd


UPX Malicious Library PWS SMTP AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed
1 4 11.8 M 47 ZeroCERT

8632 2023-09-14 19:15 6sev8udq1h.dll  

3a96a42f6d6334a36d2ea26abb0a2c95


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware unpack itself Remote Code Execution
1.8 M 15 ZeroCERT

8633 2023-09-14 19:11 wininit.exe  

2e6868ba26f8fa8bd7ee1e865165da8c


Formbook .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser DNS
16 15 2 12 10.8 M 39 ZeroCERT

8634 2023-09-14 19:11 jyi6mm2w2g.dll  

7d2156efddf126dfb4c466da06f15e11


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware Remote Code Execution
1.4 M 15 ZeroCERT

8635 2023-09-14 19:10 o0SoFtIk0o_crypted_FOX.exe  

90b8030fc8d0624d93d77b6a7743ab5c


UPX Malicious Library PWS SMTP AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed
1 3 3 12.2 M 37 ZeroCERT

8636 2023-09-14 19:10 i9ien8gksg.dll  

fcbb53724b1df93a5d1fc45bb55b9069


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware Remote Code Execution
1.4 M 15 ZeroCERT

8637 2023-09-14 19:10 hk1c9y18em.dll  

a6ac1a8bb63362ed7515f2ca02fb52be


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware Remote Code Execution
1.4 M 16 ZeroCERT

8638 2023-09-14 19:09 wc4aw1t506.dll  

e4919447b9ea5c4f02a0746ab64f8e7e


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware Remote Code Execution
1.4 M 16 ZeroCERT

8639 2023-09-14 19:09 6sev8udq1h.dll  

3a96a42f6d6334a36d2ea26abb0a2c95


UPX Malicious Library PE File DLL PE64 DllRegisterServer dll OS Processor Check VirusTotal Malware Remote Code Execution
1.4 M 15 ZeroCERT

8640 2023-09-14 19:08 main.cgi  

f1851b8e5b0f4eb699d0c50002385313


PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key
3.0 M 50 ZeroCERT