popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8971 2023-09-01 09:07 wwlib  

aa1188eb63e988676a78adf858d8a887


Malicious Library UPX OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Remote Code Execution 		1.4 17 ZeroCERT

8972 2023-09-01 09:07 4t.exe  

33a1cc504b545fc22aa44dbc9cf12882


Malicious Library PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 23 ZeroCERT

8973 2023-09-01 09:07 HWX.vbs  

eff515cd80fca123c65f7ed20d7f071f


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.8 5 ZeroCERT

8974 2023-09-01 09:00 230827- 협의회 참여단체 현황.xlsx.lnk...  

bc3fb948dc956f79dbc7aac06442d6ef


AntiDebug AntiVM Lnk Format GIF Format PowerShell ZIP Format Malware download Vulnerability VirusTotal Malware VBScript powershell Microsoft AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger WMI wscript.exe payload download Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key Dropper 		1 5 5 10.0 M 10 ZeroCERT

8975 2023-08-31 18:41 Test.dll  

f4e3845b30dac395fcd56a25cebf4fb8


Malicious Library .NET DLL DLL PE File PE32 		0.4 guest

8976 2023-08-31 14:57 syscall.exe  

c95d214005076e29185b0f9cb05adcd9


Gen1 Malicious Library UPX OS Processor Check PE File PE64 VirusTotal Malware PDB sandbox evasion 		1.6 20 ZeroCERT

8977 2023-08-31 14:51 novojay2.1.exe  

5593a8e8c5000016aea6d7d3368289c0


NSIS Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Software crashed keylogger 		2 2 8.8 M 22 ZeroCERT

8978 2023-08-31 13:26 372688131_122117915342010661_1...  

31bd4726f47463794574a1a6aba359e9


JPEG Format 		guest

8979 2023-08-31 13:21 setup_pass1234.7z  

b91e7390dd00dc6715856489c653d438


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro Remote Code Execution Trojan DNS Downloader 		22 49 35 11 6.2 M ZeroCERT

8980 2023-08-31 13:15 https://scontent-ord5-1.xx.fbc...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM JPEG Format icon MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 2 4.2 guest

8981 2023-08-31 13:05 372692248_122117916470010661_8...  

d791f9b33a6c8e010ed6905d5427491e


JPEG Format 		guest

8982 2023-08-31 13:04 372692248_122117916470010661_8...  

d791f9b33a6c8e010ed6905d5427491e


JPEG Format 		guest

8983 2023-08-31 12:35 referent.hta  

cf35de3a0d4386f729982c33a1cc298a


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut RWX flags setting unpack itself suspicious process suspicious TLD Windows ComputerName Cryptographic key 		2 5.6 ZeroCERT

8984 2023-08-31 12:31 xp_amp_app_usage_dnu-2023-08-2...  

195e33f55e504c45d059e006a6e75821


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

8985 2023-08-31 11:24 t.php.exe  

588bbac508cd620fae65c16a47b2fc1c


UPX OS Processor Check DLL PE File PE64 PDB 		0.8 ZeroCERT

keyword