popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9046 2023-11-08 08:04 d12934-0202334.doc  

eac138b49c6f90896c9af5cbc8fe38b8


VBA_macro Generic Malware Antivirus MSOffice File PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut RWX flags setting exploit crash unpack itself suspicious process WriteConsoleW Windows Exploit ComputerName DNS Cryptographic key crashed 		1 1 9.6 M ZeroCERT

9047 2023-11-08 07:43 build.exe  

b243344cf0e32c4f723ef42b48aa256c


Malicious Library UPX PE File PE32 OS Processor Check unpack itself Remote Code Execution 		1.0 ZeroCERT

9048 2023-11-08 07:41 madykapen2.1.exe  

b401492fb6f237abf7327201a0df6e7e


NSIS Malicious Library UPX PE File PE32 OS Processor Check AutoRuns Check memory Creates executable files unpack itself AppData folder Windows DNS DDNS 		2 2 4.6 ZeroCERT

9049 2023-11-07 19:21 WWW14_64.exe  

b79c2d99b9899e66e9a3c16b5bc407cb


PrivateLoader NPKI RedLine Infostealer RedLine stealer HermeticWiper Generic Malware NSIS Suspicious_Script UPX Malicious Library Antivirus Malicious Packer .NET framework(MSIL) Confuser .NET Admin Tool (Sysinternals etc ...) Anti_VM Javascript_Bl Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Microsoft suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion IP Check VM Disk Size Check installed browsers check PrivateLoader Tofsee Ransomware Stealer Windows Browser ComputerName Trojan DNS Cryptographic key Software crashed 		23 40 23 9 22.2 M ZeroCERT

9050 2023-11-07 19:17 MKiNn8877.exe  

524730069cd81878eef9b8186fc67963


AgentTesla Confuser .NET PWS SMTP KeyLogger AntiDebug AntiVM PE File PE64 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Software crashed keylogger 		2 2 10.2 M ZeroCERT

9051 2023-11-07 19:15 ss.exe  

48765ca4f90c51b4adf429311d794d29


Malicious Library UPX PE File PE32 MZP Format Browser Info Stealer Malware download Malware Cryptocurrency wallets Cryptocurrency Malicious Traffic Check memory buffers extracted unpack itself Collect installed applications suspicious TLD sandbox evasion installed browsers check Ransomware Lumma Stealer Browser ComputerName Firmware DNS crashed 		1 2 4 8.8 M ZeroCERT

9052 2023-11-07 19:14 WinRar.exe  

12ad5dac08fffe484f5bece941c6ee4e


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 1 3.8 ZeroCERT

9053 2023-11-07 19:13 build.exe  

02f447aa40e3fd73d05c72ed4249ff4d


Malicious Library UPX PE File PE32 OS Processor Check PDB unpack itself Remote Code Execution DNS 		2 1.8 M ZeroCERT

9054 2023-11-07 19:12 StealerClient_Sharp.exe  

344e9762e1477db04edfecaa07cef091


Malicious Library UPX Malicious Packer .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check Check memory Checks debugger unpack itself ComputerName Remote Code Execution 		1.2 M ZeroCERT

9055 2023-11-07 19:09 toolspub4.exe  

ba07981c0db641512c0004aac1654895


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check Malware Code Injection Checks debugger buffers extracted unpack itself 		5.8 M ZeroCERT

9056 2023-11-07 19:08 a.exe  

248fdd80b574b1379fe4f6f1cee40091


email stealer Downloader .NET framework(MSIL) Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Code injection persistence KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs WriteConsoleW Windows DNS 		1 10.8 M ZeroCERT

9057 2023-11-07 19:07 StealerClient_Cpp.exe  

0e149c713146c9c1ea53d7b7fa3b39e1


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check 		M ZeroCERT

9058 2023-11-07 19:05 Juderk.exe  

3f47913af364115da3a560edb88035ae


Themida Packer Malicious Library Anti_VM PE File PE32 .NET EXE Browser Info Stealer RedLine Malware download FTP Client Info Stealer Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Stealer Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 5 8.4 M ZeroCERT

9059 2023-11-07 19:05 xoIBL6LAISDs.exe  

eb29546aff8b06616b7b226986fd7827


Browser Login Data Stealer Generic Malware Malicious Library UPX Malicious Packer Downloader PE File PE32 OS Processor Check Windows DNS keylogger 		1 2.8 ZeroCERT

9060 2023-11-07 15:02 CVE 2001-0241.pcap  

aa96f5eaeb8f04a7e6fc1f1cb455d195


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

keyword