popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8986 2023-11-11 16:12 audiodgs.exe  

23c236d7c2132d874492c9cc1edb3df2


AgentTesla .NET framework(MSIL) SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		9.0 ZeroCERT

8987 2023-11-11 13:24 XClientvm.exe  

386f066c417fa04b1d6f94ac81f1be6b


Antivirus UPX PE32 PE File .NET EXE OS Processor Check suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2.6 M ZeroCERT

8988 2023-11-11 13:22 Aasd2wdsdas.exe  

c652cb73b3e3c45d34d494441d84780d


Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check Windows crashed 		0.8 ZeroCERT

8989 2023-11-11 13:22 B.exe  

74f3a69c12af4f57291a63bb8418f8cc


Malicious Packer UPX PE32 PE File .NET EXE OS Processor Check Check memory Checks debugger unpack itself ComputerName 		1.0 ZeroCERT

8990 2023-11-11 13:20 XClient.exe  

9c4b77cf2202adddde8c49474b31760e


Antivirus UPX PE32 PE File .NET EXE OS Processor Check suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2.6 M ZeroCERT

8991 2023-11-11 13:20 const.exe  

2e12de9f8aa8b2513ab5cd51549ea472


Malicious Library UPX PE File PE64 OS Processor Check WriteConsoleW 		0.4 ZeroCERT

8992 2023-11-10 10:06 Pikabot_pw_H17.zip  

1e64f3868dc8dc63eea055b19f2a73d1


ZIP Format Malware Malicious Traffic DNS 		1 3 2 1.4 M ZeroCERT

8993 2023-11-10 09:56 File.7z  

bb71ffe7937155152037cdc440585d84


PrivateLoader Vidar Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro DNS 		43 67 39 13 5.0 M ZeroCERT

8994 2023-11-10 09:35 smo.exe  

3fe5e1bbb296648428c4436703bd6302


RedLine stealer Emotet Gen1 Malicious Library UPX ScreenShot PWS AntiDebug AntiVM PE32 PE File CAB Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications AntiVM_Disk VM Disk Size Check installed browsers check Stealc Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 2 6 1 18.0 M 40 ZeroCERT

8995 2023-11-10 09:32 1.exe  

08d14f9715fe88fe5260096942b4dd51


Malicious Library Malicious Packer PE32 PE File Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 6.4 M 50 ZeroCERT

8996 2023-11-10 09:30 i.exe  

80929c8d2ecd8d400fed9a029f4e4763


SystemBC PE32 PE File VirusTotal Malware DNS 		1 1.8 M 57 ZeroCERT

8997 2023-11-10 09:30 build.exe  

bed063565678cce483a7647b3fe5dd27


Malicious Library UPX PE32 PE File OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 41 ZeroCERT

8998 2023-11-10 09:29 from.exe  

2c1702ec1ce5fce93e682e82afe6fd91


RedLine stealer Emotet Gen1 Malicious Library UPX ScreenShot PWS AntiDebug AntiVM PE32 PE File CAB Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications AntiVM_Disk VM Disk Size Check installed browsers check Stealc Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 2 6 1 17.2 M 36 ZeroCERT

8999 2023-11-10 09:28 File_Vbs.vbs  

739bf7015a7bb68f0c0452e64497be77

VirusTotal Malware wscript.exe payload download Tofsee 		1 2 2 2.6 M 4 ZeroCERT

9000 2023-11-10 09:26 File_Vbs.vbs  

f148d80b7b8949564596b07b8d56d72f


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 5 2 9.6 M 5 ZeroCERT

keyword