popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8716 2023-11-28 09:56 vbsss.jpg.exe  

db2ee1ea937d2e49bc3f237edde48cfb


Generic Malware Antivirus PE32 PE File DLL .NET DLL VirusTotal Malware 		0.6 14 ZeroCERT

8717 2023-11-28 09:34 Random.exe  

bb83e8db740d3441abb88dc34fd3759e


PE32 PE File .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.0 M 26 ZeroCERT

8718 2023-11-28 09:32 Zdznzuwlua.exe  

46c0e34ddfde46cdcf8bde9398c4d958


UPX AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Windows Cryptographic key 		9.2 M 48 ZeroCERT

8719 2023-11-28 09:29 wealthzx.exe  

bec11ca3a3a72fbb4b93e078f03b2e78


AgentTesla .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Browser Email ComputerName crashed 		9.0 M 30 ZeroCERT

8720 2023-11-28 09:29 microsoftbrowserEdgedeletedhis...  

75ae457731beea5721c8107608ee8316


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit crashed 		2 3 2.8 M 30 ZeroCERT

8721 2023-11-28 09:28 wininit.exe  

e8fc0040e6882e0b9ea0e830b6d74d65


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM PE32 PE File .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		2 5 1 9.0 M 29 ZeroCERT

8722 2023-11-28 09:27 file2data.exe  

e1628c99654edfe58f07bddbd9b29940


Malicious Packer .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows ComputerName 		2 2 3.2 M 39 ZeroCERT

8723 2023-11-28 09:25 wlanext.exe  

3713c253ab56bf85aaa806fc41cc6905


AgentTesla .NET framework(MSIL) KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		11.6 M 43 ZeroCERT

8724 2023-11-28 09:25 filer.exe  

51f23cd8d73782f1dd032789f10def23


Malicious Packer Antivirus .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware PDB 		1.6 M 31 ZeroCERT

8725 2023-11-28 09:23 file1.exe  

a7c67b27eb08e972fe6bb64df73bd19d


Malicious Packer Antivirus .NET framework(MSIL) UPX Anti_VM PE32 PE File .NET EXE OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.4 M 48 ZeroCERT

8726 2023-11-28 09:23 htmljason.vbs  

e64be178e12b020963cc38980edc18f8

VirusTotal Malware wscript.exe payload download Tofsee 		1 2 2 2.8 M 16 ZeroCERT

8727 2023-11-28 09:21 wlanext.exe  

9aeed55e2703a03cf9e922dc695db1ab


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser ComputerName DNS 		16 24 5 12 10.6 M 31 ZeroCERT

8728 2023-11-28 09:21 MicrosoftbrowserEdgeentierhist...  

1363064ab295a3d2cb98232cc188eb42


Formbook MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware RWX flags setting exploit crash Windows Exploit DNS crashed 		16 10 14 3.4 M 34 ZeroCERT

8729 2023-11-28 09:21 InstallSetup2.exe  

631a53494c133f38982b1c8e73f1a42c


PE32 PE File .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.2 M 35 ZeroCERT

8730 2023-11-28 09:21 microsoftdeltedentirefileschac...  

880f0c9bc44adc32f0cab0a386d338ee


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit crashed 		3.2 M 30 ZeroCERT

keyword