popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9061 2023-11-07 11:30 tuc19.exe  

a8c3b73f59bdf41eb250cba92fa934f1


Gen1 Emotet Generic Malware Malicious Library UPX Confuser .NET Malicious Packer PE File PE32 MZP Format DLL OS Processor Check CHM Format PE64 DllRegisterServer dll suspicious privilege Checks debugger Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows ComputerName crashed 		4.0 M ZeroCERT

9062 2023-11-07 11:30 tuc19.exe  

63b908a7f395bb899f1d4afbbc472d1e


Gen1 Emotet Generic Malware Malicious Library UPX Confuser .NET Malicious Packer PE File PE32 MZP Format DLL OS Processor Check CHM Format PE64 DllRegisterServer dll suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows ComputerName crashed 		4.2 M ZeroCERT

9063 2023-11-07 11:24 setup294.exe  

a05ee0fea78a297e1a4182ce9d5cd8a4


Malicious Library AntiDebug AntiVM PE File PE32 DLL Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder 		4.0 ZeroCERT

9064 2023-11-07 11:03 syncUpd.exe  

a1fd31c9149678ba7c05e3adad8ac568


Malicious Library UPX PE File PE32 OS Processor Check unpack itself 		0.8 ZeroCERT

9065 2023-11-07 10:59 File.rar  

f990fd3d664b4a2cd89a21cb6e2a9911


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware c&c Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Browser RisePro DNS Downloader plugin 		62 93 57 10 7.2 M ZeroCERT

9066 2023-11-07 10:13 bRoC.exe  

07807c652283c997837c931b41c45f24


PE File PE32 .NET EXE VirusTotal Malware Tofsee 		1 3 1 1.6 53 ZeroCERT

9067 2023-11-07 10:12 aww.exe  

3d74ec695d023d5a66cb239354445734


Malicious Library Malicious Packer PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 6.4 M 48 ZeroCERT

9068 2023-11-07 10:12 Runtime.exe  

bcbbef1fa9490ce2337f1bd74480e428


PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 23 ZeroCERT

9069 2023-11-07 09:52 SFT.zip  

882e1e40bd642dac255ec144e37e06d0


ZIP Format Malware Malicious Traffic DNS 		2 3 2 1.4 guest

9070 2023-11-07 09:46 EHSU.zip  

056f1e5e64d6246b96f5fa6b3322f3e1


ZIP Format Malware Malicious Traffic DNS 		2 3 2 1.4 guest

9071 2023-11-07 09:22 owenzx.exe  

8311a1beb1bde04ce733fba1f436bad6


Formbook PWS AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		1 3 1 1 9.0 M 24 ZeroCERT

9072 2023-11-07 07:58 InstallSetup2.exe  

ad27582b0ebc76918e74b90d1cbff760


NPKI HermeticWiper NSIS Generic Malware Suspicious_Script Malicious Library UPX Antivirus Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM Javascript_Blob PE File PE32 PNG Format JPEG Format OS Processor Check ZIP Format icon BMP Format PE64 CAB Malware Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Ransomware 		5.0 M ZeroCERT

9073 2023-11-07 07:58 IGCC.exe  

a3bb5280d95d7c638240975925c013ac


AgentTesla Generic Malware Antivirus PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer powershell AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 14.4 M ZeroCERT

9074 2023-11-07 07:56 Protected.exe  

a22595ce0f38b327951c42e18ad3eaaf


Formbook Raccoon Stealer Generic Malware UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 FormBook Malware download Malware Buffer PE suspicious privilege Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself 		3 7 2 5.6 M ZeroCERT

9075 2023-11-07 07:53 damianozx.exe  

7cfd00516e3d24c4b1227d6754f0aafa


PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.0 M ZeroCERT

keyword