popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8671 2023-11-30 09:08 chungzx.doc  

32df679e7f2b7ddb0fab5275e968c10d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself suspicious TLD Windows Exploit DNS DDNS crashed 		1 4 7 5.6 M 31 ZeroCERT

8672 2023-11-30 09:06 1  

45ae0455fdcb1ceb6e1d3eed8ba7ffaf


Downloader UPX PE32 PE File VirusTotal Malware crashed 		1.6 M 11 ZeroCERT

8673 2023-11-30 07:18 webplugin.exe  

174a99ce7fd9e7cfe4634a0125a2ecb2


Emotet NSIS Malicious Library UPX PE32 PE File DLL OS Processor Check Lnk Format GIF Format VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself suspicious process 		2.4 M 2 ZeroCERT

8674 2023-11-30 07:15 hjk.exe  

95ee9a372c00b4fbb86fc4cab7af8739


Generic Malware Malicious Library UPX PWS SMTP DNS AntiDebug AntiVM PE File PE64 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key 		8.4 M 36 ZeroCERT

8675 2023-11-30 07:13 B13zx.exe  

93fcdbdc88b1331060cd070f569e3e93


LokiBot North Korea Socket PWS DNS AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs suspicious TLD installed browsers check Browser Email ComputerName DNS Software 		1 2 7 13.6 M 51 ZeroCERT

8676 2023-11-30 07:11 987123.exe  

e2557e6dc21ccdfb9c2004f97fe03a57


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware unpack itself Windows crashed 		3.0 M 33 ZeroCERT

8677 2023-11-30 07:11 Usmgboc.exe  

491310d10c0ea2d217c90a2403c20bea


Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 M 40 ZeroCERT

8678 2023-11-30 07:10 zackzx.exe  

88b0c932e404501921d7e88757bf82b2


.NET framework(MSIL) PWS AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser 		9 8 12.2 30 ZeroCERT

8679 2023-11-30 07:09 eta.exe  

d96ad0c55fdda0eedebc56b4a2f1d3b8


Generic Malware Malicious Library UPX PWS SMTP DNS AntiDebug AntiVM PE File PE64 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.8 36 ZeroCERT

8680 2023-11-30 00:39 libier_3402.pdf  

eaafeaa8f30f2eba91cdd62af7acdd1a


PDF 		guest

8681 2023-11-29 16:00 file_ver_9.rar  

0626f8e71d8a91fd6185df77a50b9fbc


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Vidar Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro DNS plugin 		36 46 49 3 6.6 M ZeroCERT

8682 2023-11-29 14:38 maxziflowzx.exe  

5393d9e3a30269ebfed5456bf1304e92


.NET framework(MSIL) AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself AppData folder Browser DNS 		18 26 2 11.0 M 20 ZeroCERT

8683 2023-11-29 14:33 123.exe  

5ab89a96be7570dfe4f49e6b9a42bc88


Malicious Library UPX PE32 PE File MZP Format OS Processor Check JPEG Format DLL VirusTotal Malware AutoRuns Creates executable files unpack itself AppData folder Tofsee Windows Advertising Google ComputerName DNS DDNS crashed keylogger 		2 8 4 9.6 M 67 ZeroCERT

8684 2023-11-29 14:33 clip.dll  

4194e9b8b694b1e9b672c36f0d868e32


Amadey Malicious Library UPX PE32 PE File DLL OS Processor Check VirusTotal Malware PDB Malicious Traffic Checks debugger unpack itself suspicious TLD 		1 4 3.6 M 53 ZeroCERT

8685 2023-11-29 14:33 index.php  

b13eac66431fb3332fae4527ab1b0e2e


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		1.6 M 33 ZeroCERT

keyword