Home
Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide
2020-06-10
Version history
2020-06-10
login
popup
Submissions
10
15
20
50
Request
Connection
hash(md5,sha256)
Signature
PE API
Tag or IDS
Icon
user nickname
Date range button:
Date range picker
First seen:
Last seen:
No
Date
Request
Urls
Hosts
IDS
Rule
Score
Zero
VT
Player
Etc
901
2024-08-19 14:54
MPDW-constraints.vbs
a688b4bdbe8491ab01ed19eaec5ed363
Generic Malware
Antivirus
Hide_URL
PowerShell
VirusTotal
Malware
powershell
suspicious privilege
Check memory
Checks debugger
Creates shortcut
unpack itself
Check virtual network interfaces
suspicious process
WriteConsoleW
Tofsee
Windows
ComputerName
Cryptographic key
1
Keyword trend analysis
×
Info
×
https://ia803104.us.archive.org/27/items/vbs_20240726_20240726/vbs.jpg
2
Info
×
ia803104.us.archive.org(207.241.232.154) - malware
207.241.232.154 - malware
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
7.6
M
4
ZeroCERT
902
2024-08-19 14:50
crypted.exe
89f8854b55c785c3ff89726b7e763a33
PE File
.NET EXE
PE32
VirusTotal
Malware
PDB
Check memory
Checks debugger
unpack itself
ComputerName
2.6
M
35
ZeroCERT
903
2024-08-19 14:49
alsuuu.exe
0db78abd5b7a1504ae68963800823ea5
Generic Malware
Malicious Library
UPX
PE File
PE32
OS Processor Check
PE64
VirusTotal
Malware
AutoRuns
PDB
Creates executable files
unpack itself
AppData folder
Tofsee
Windows
Remote Code Execution
crashed
1
Keyword trend analysis
×
Info
×
https://bitbucket.org/fcsdcvscvc/sadcasdv/raw/640914c3276630f3faf77d5ac3551bf072ba43a2/flLCSC
2
Info
×
bitbucket.org(104.192.140.26) - malware
104.192.140.24
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
4.2
M
50
ZeroCERT
904
2024-08-19 14:48
MJDSWXBP.exe
499cea41f461a8b85fa9d93bb6adf88c
Generic Malware
Malicious Library
UPX
Malicious Packer
Obsidium protector
Admin Tool (Sysinternals etc ...)
PE File
PE32
DLL
OS Processor Check
MZP Format
VirusTotal
Malware
Check memory
Checks debugger
buffers extracted
Creates executable files
unpack itself
suspicious process
AppData folder
AntiVM_Disk
VM Disk Size Check
ComputerName
5.6
M
32
ZeroCERT
905
2024-08-19 14:46
fskn.exe
47f6d152f5e20e8599def568c3b4dd2a
Generic Malware
Malicious Library
UPX
PE File
PE32
OS Processor Check
VirusTotal
Malware
PDB
Tofsee
crashed
1
Keyword trend analysis
×
Info
×
https://bitbucket.org/fcsdcvscvc/sadcasdv/raw/5e26094c113368ffe700e7831cddf9cbb14147f0/HARDCOREE
2
Info
×
bitbucket.org(104.192.140.24) - malware
104.192.140.26 - mailcious
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
1.6
M
51
ZeroCERT
906
2024-08-19 14:46
POS_C014.exe
81ebdfd489183d94dc5b77c6e29a9876
Malicious Library
UPX
PE File
DllRegisterServer
dll
PE32
MZP Format
VirusTotal
Malware
unpack itself
crashed
1.8
M
3
ZeroCERT
907
2024-08-19 14:44
66c0c51e57afc_666b.exe#grid
534cd669718f8448a90d0493ba2fb237
Malicious Library
.NET framework(MSIL)
UPX
PE File
.NET EXE
PE32
VirusTotal
Malware
Check memory
Checks debugger
unpack itself
2.0
M
44
ZeroCERT
908
2024-08-19 14:43
RunGameADD.exe
c2e60013e06179236d27f81811f848df
CoinMiner
AutoIt
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Check memory
Checks debugger
2.6
M
53
ZeroCERT
909
2024-08-19 14:42
rocket.exe
2b5a2c2d70c3c5ac3a5804ca1345a694
Generic Malware
Malicious Library
Antivirus
UPX
PE File
PE32
OS Processor Check
VirusTotal
Malware
PDB
unpack itself
Remote Code Execution
2.4
M
16
ZeroCERT
910
2024-08-19 14:41
POS_C169.exe
9eadf86f56f6423e3c952be255631746
Malicious Library
UPX
PE File
DllRegisterServer
dll
PE32
MZP Format
VirusTotal
Malware
unpack itself
crashed
1.8
M
11
ZeroCERT
911
2024-08-19 14:40
huoronguninstall.exe
bede47f1fc4c20a850f70986399419d9
CoinMiner
AutoIt
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Check memory
Checks debugger
unpack itself
sandbox evasion
3.4
M
54
ZeroCERT
912
2024-08-19 14:39
nubmerts.exe
bdc79de40c6138163814e9a0c2f46c8b
Generic Malware
Malicious Library
UPX
PE File
PE32
OS Processor Check
VirusTotal
Malware
PDB
Tofsee
crashed
1
Keyword trend analysis
×
Info
×
https://bitbucket.org/fcsdcvscvc/sadcasdv/raw/2e15c61641e5b6baaa704aea2c3ad1cf164da252/Fdfsfcsvvvc
2
Info
×
bitbucket.org(104.192.140.24) - malware
104.192.140.24
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
1.2
M
28
ZeroCERT
913
2024-08-19 14:38
steamcommunityup.exe
134e67601937b96d67555408ef47111a
Generic Malware
UPX
PE File
PE32
VirusTotal
Malware
Checks debugger
unpack itself
3.0
M
44
ZeroCERT
914
2024-08-19 14:37
66b9d00589bbc_doz.exe
7e729a0eb0ab720e7b7120fd4992d084
Stealc
Client SW User Data Stealer
LokiBot
ftp Client
info stealer
Themida Packer
Antivirus
Malicious Library
ASPack
UPX
Http API
PWS
HTTP
Code injection
Internet API
AntiDebug
AntiVM
PE File
.NET EXE
PE32
OS Processor Check
FTP Client Info Stealer
VirusTotal
Malware
Telegram
Buffer PE
suspicious privilege
MachineGuid
Code Injection
Malicious Traffic
Check memory
Checks debugger
buffers extracted
WMI
unpack itself
Windows utilities
Checks Bios
Collect installed applications
Detects VMWare
suspicious process
malicious URLs
sandbox evasion
WriteConsoleW
VMware
anti-virtualization
installed browsers check
Tofsee
Windows
Browser
ComputerName
Firmware
DNS
Software
crashed
2
Keyword trend analysis
×
Info
×
https://steamcommunity.com/profiles/76561199751190313 - rule_id: 41879
https://t.me/pech0nk
5
Info
×
t.me(149.154.167.99) - mailcious
steamcommunity.com(173.222.146.99) - mailcious
149.154.167.99 - mailcious
195.201.118.191
104.71.154.102
3
Info
×
ET INFO TLS Handshake Failure
ET INFO Observed Telegram Domain (t .me in TLS SNI)
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
1
Info
×
https://steamcommunity.com/profiles/76561199751190313
20.6
M
54
ZeroCERT
915
2024-08-19 14:36
DownYGX.exe
36f62b7cdf6f360b0eec74c5a371a102
CoinMiner
Emotet
AutoIt
Generic Malware
UPX
Malicious Library
Malicious Packer
PE File
PE32
DLL
MSOffice File
OS Processor Check
VirusTotal
Malware
suspicious privilege
Check memory
Checks debugger
Creates executable files
unpack itself
AppData folder
WriteConsoleW
Tofsee
1
Keyword trend analysis
×
Info
×
https://static.yungengxin.com/Soft/Download/Standard_x64_2021.8.15.15832.zip
2
Info
×
static.yungengxin.com(36.249.92.207)
42.177.83.87
1
Info
×
SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
5.4
M
48
ZeroCERT
First
Previous
61
62
63
64
65
66
67
68
69
70
Next
Last
Total : 48,199cnts
Delete
×
Do you want to delete it?
View
×
Insert
×
http
domains
hosts
ips
Memo
Tag
Alert
×
Insert error....
keyword