popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8866 2023-11-16 18:34 svchost.exe  

54a47f6b5e09a77e61649109c6a08866


Gen1 Malicious Packer UPX PE32 PE File PDB Remote Code Execution 		0.4 guest

8867 2023-11-16 18:34 Windows Loader.exe  

ab6675956f434085e7a387c7c76e8ceb


Gen1 Generic Malware Malicious Library Malicious Packer UPX PE32 PE File MachineGuid Check memory Checks debugger WMI RWX flags setting unpack itself Checks Bios sandbox evasion anti-virtualization ComputerName Remote Code Execution Firmware crashed 		5.6 guest

8868 2023-11-16 16:24 02390d465ec5ef463741f737b0d098...  

01244c0aaa1117bb904d354dc8f5729f


RedLine Infostealer UltraVNC Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger ICMP traffic unpack itself Check virtual network interfaces suspicious TLD Windows Cryptographic key crashed keylogger 		1 2 7.4 20 r0d

8869 2023-11-16 15:57 htmlbrowserhistorycleanbothfil...  

819445270fd095cf54c6768d1e380e1b


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 5 2 9.0 2 ZeroCERT

8870 2023-11-16 15:54 htmlbrowserhistorycleanwithcoo...  

1840929cb01d825efc19c973c961230d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 4.8 M 33 ZeroCERT

8871 2023-11-16 15:21 5dd663aa30da9fd0b72650d9e8c259...  

fd36da278e03915e659c14f3c1b88a56


RedLine Infostealer UltraVNC Malicious Library UPX PE32 PE File ftp OS Processor Check VirusTotal Malware PDB Check memory Checks debugger ICMP traffic unpack itself Check virtual network interfaces suspicious TLD Windows Cryptographic key crashed 		2 6.2 12 r0d

8872 2023-11-16 13:37 clp.exe  

9bc7730e14189753be3c8c680c12d3a7


UPX PE File PE64 .NET EXE VirusTotal Malware Windows Remote Code Execution crashed 		2.8 M 50 ZeroCERT

8873 2023-11-16 13:35 lightmuzik2.1.exe  

8a7e5664d1f1d5bf41c6d943299aa1e8


NSIS Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 7.2 M 47 ZeroCERT

8874 2023-11-16 13:32 amd.exe  

20475c809f00840b49f662de6c9216ff


Amadey Themida Packer Generic Malware UPX Anti_VM PE32 PE File VirusTotal Malware AutoRuns Malicious Traffic Check memory unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process AppData folder WriteConsoleW VMware anti-virtualization Windows ComputerName Firmware DNS crashed 		1 1 1 11.8 M 53 ZeroCERT

8875 2023-11-16 13:30 TrueCrypt_lDwnwJ.exe  

d6a28fab04acec60305a5c6be5b105d2


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		0.6 7 ZeroCERT

8876 2023-11-16 13:28 build.exe  

af3b051d8a6a33705bd095b6d5608355


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 33 ZeroCERT

8877 2023-11-16 13:27 unsecapp.exe  

7630a755b70921f9f22891035c3628e9


Malicious Library PE32 PE File Browser Info Stealer VirusTotal Malware unpack itself AppData folder suspicious TLD Browser DNS 		21 32 5 4.0 M 54 ZeroCERT

8878 2023-11-16 13:26 ama.exe  

501fa03f6abac7f44696927b21cfefb5


Amadey Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware AutoRuns Malicious Traffic Check memory RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		1 1 1 8.2 M 51 ZeroCERT

8879 2023-11-16 13:23 traffico.exe  

461b8083838b2d837b19466b5acce0e4


Malicious Library Malicious Packer PE32 PE File Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 6.2 M 49 ZeroCERT

8880 2023-11-16 07:56 ama.exe  

a61aac13f8a4841915791fb57aa2e275


Amadey UPX PE32 PE File Malware download Amadey Malware AutoRuns Malicious Traffic Check memory RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS 		1 4 2 1 7.8 M ZeroCERT

keyword