popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8911 2023-09-04 17:13 foto2166.exe  

1ad10fe1f8b0816dcc0c371a16383f10


Gen1 Emotet Malicious Library UPX CAB PE File PE32 VirusTotal Malware AutoRuns PDB suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities Disables Windows Security suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows Update Remote Code Execution Cryptographic key crashed 		8.6 M 46 ZeroCERT

8912 2023-09-04 17:10 @interpoIpanic_alice.exe  

d9109db79ab552695a226bd2bde10c92


Malicious Library UPX AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 9.2 28 ZeroCERT

8913 2023-09-04 17:08 fotod200.exe  

e08ec2efbc2cb0b25e6b8b63a6c19014


Gen1 Emotet Malicious Library UPX CAB PE File PE32 VirusTotal Malware AutoRuns PDB Check memory Creates executable files unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows Remote Code Execution 		5.2 39 ZeroCERT

8914 2023-09-04 17:08 obizx.exe  

1caeba20d73f6665029d6bc0fa853312


.NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 22 ZeroCERT

8915 2023-09-04 17:06 gen.txt.vbs  

028a0617ed7c664bd7ba075bf52fb984


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 9.0 M 6 ZeroCERT

8916 2023-09-04 17:05 cod.jpg.vbs  

40674809fecf09c232335b84919108b2


Antivirus crashed 		0.2 M ZeroCERT

8917 2023-09-04 15:26 set17.exe  

9cb1d62bdfac3735fcbc75a9ed9fc113


Emotet Gen1 Malicious Library UPX Confuser .NET MZP Format PE File PE32 DLL OS Processor Check DllRegisterServer dll PE64 CHM Format suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows ComputerName crashed 		4.2 M ZeroCERT

8918 2023-09-04 15:23 setup294.exe  

6b4871afc29f9a0494fddb3a475c638e


Malicious Library UPX AntiDebug AntiVM OS Processor Check PE File PE32 DLL PDB Code Injection Checks debugger Creates executable files unpack itself AppData folder Remote Code Execution 		3.4 ZeroCERT

8919 2023-09-04 15:10 Instal_pass.7z  

6012442e75bf062ee37a19e3b813b95c


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows RisePro Trojan DNS Downloader 		25 49 28 4 6.0 M ZeroCERT

8920 2023-09-04 15:06 Invitation To Attend Cryptocur...  

0b4aab3d1e2946b15b70a63187c1f927


AntiDebug AntiVM CHM Format VirusTotal Malware AutoRuns MachineGuid Code Injection Check memory RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		1 4.8 20 ZeroCERT

8921 2023-09-04 11:15 4.html  

f71368efc1380be49fbffadd63510ab1


Antivirus AntiDebug AntiVM MSOffice File Code Injection exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.4 M ZeroCERT

8922 2023-09-04 11:06 4.html  

f71368efc1380be49fbffadd63510ab1


Antivirus unpack itself crashed 		0.6 M ZeroCERT

8923 2023-09-04 11:01 Konni_종합소득세 해명자료 제출 안내.lnk...  

19dc387bffdc0a22f640bd38af320db4


Generic Malware Suspicious_Script_Bin Antivirus HWP PS PostScript Malicious Library AntiDebug AntiVM Lnk Format GIF Format PowerShell MSOffice File PE File PE32 ZIP Format Malware download VirusTotal Malware Campaign powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger WMI heapspray Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check Konni Windows ComputerName DNS Cryptographic key 		3 5 2 15.4 10 ZeroCERT

8924 2023-09-04 10:30 Fukushima.chm  

9e6a2914a35256dd450db549fb975f45


Generic Malware Antivirus Hide_URL AntiDebug AntiVM CHM Format VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process suspicious TLD WriteConsoleW Interception Windows ComputerName Cryptographic key 		2 2 1 8.4 14 ZeroCERT

8925 2023-09-04 09:40 aafg31.exe  

103b3199c5a7b92b74ce14f14a3965d4


Malicious Library UPX PE File PE64 VirusTotal Malware PDB unpack itself Tofsee Remote Code Execution 		1 2 2 1.8 33 ZeroCERT

keyword