popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8746 2023-11-26 13:56 new.exe  

0179eec24965822ea41af4447d767961


Generic Malware Antivirus UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName Cryptographic key keylogger 		8.4 M 55 ZeroCERT

8747 2023-11-26 13:52 devenvhost.exe  

552fc1ab56ac48bebff7d6ddb8555045


Gen1 Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check VirusTotal Malware PDB Code Injection Check memory Checks debugger Creates executable files unpack itself WriteConsoleW Remote Code Execution 		5.8 M 54 ZeroCERT

8748 2023-11-26 13:50 timeSync.exe  

1bdfbfdae4986adb79324930d7c9eaa3


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		1.6 M 35 ZeroCERT

8749 2023-11-26 13:49 home.exe  

b5f964d3dbe27ea562d3a750af190bea


Malicious Library Malicious Packer UPX PE32 PE File OS Processor Check ZIP Format Lnk Format GIF Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory Creates shortcut Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 7 13.2 M 43 ZeroCERT

8750 2023-11-26 13:47 toolspub2.exe  

5f4839a45c6193363a21b784bf91e783


Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		6.6 M 30 ZeroCERT

8751 2023-11-26 13:45 update.exe  

37035aa02a65b1b869898cb611d37686


Browser Login Data Stealer NetWire RAT Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware AutoRuns Check memory Checks debugger Creates executable files AppData folder Windows DNS DDNS 		1 1 4.8 M 60 ZeroCERT

8752 2023-11-26 13:45 winrar.exe  

715d9e1786839981fc5aa6ec4c9df1a6


Antivirus UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		4.4 M 58 ZeroCERT

8753 2023-11-26 13:43 setup.exe  

13c54df3790dbde46fbe989793e21ce7


Malicious Library PE32 PE File VirusTotal Malware WMI Creates executable files RWX flags setting Checks Bios anti-virtualization ComputerName 		3.8 M 28 ZeroCERT

8754 2023-11-26 13:42 Server.exe  

a92ef911215a303fc49de97c4c6d837f


njRAT backdoor PE32 PE File .NET EXE VirusTotal Malware WriteConsoleW DNS DDNS 		1 1 1.8 M 65 ZeroCERT

8755 2023-11-26 13:41 macindas2.1.exe  

84682f07f2f1698e49b6a29573c5679d


NSIS Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		4 9 2 4.2 M 48 ZeroCERT

8756 2023-11-26 13:40 sihost.exe  

8a7ee9dbd620232871c7ce897fcb14e9


PE32 PE File .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 53 ZeroCERT

8757 2023-11-26 13:40 asusns.exe  

e59325a169b1a80fd0525ea86e130ff8


Formbook AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder suspicious TLD Browser DNS 		19 5 18 9.6 M 43 ZeroCERT

8758 2023-11-26 13:39 update.exe  

4a657cf9c1289e3df987268e32961a66


Generic Malware Malicious Library Antivirus UPX Malicious Packer PE32 PE File CAB OS Processor Check DLL MSOffice File DllRegisterServer dll Malware download VirusTotal Malware Buffer PE PDB suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check BumbleBee ComputerName DNS 		20 2 5.2 M 5 ZeroCERT

8759 2023-11-26 13:38 test.exe  

3630b92ac5ed33de5eb53b563913bb02


Malicious Library .NET framework(MSIL) UPX PE32 PE File .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 62 ZeroCERT

8760 2023-11-26 13:37 syncUpd.exe  

cbea2e95a6df177f26b684090c1d28db


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		1.4 M 29 ZeroCERT

keyword