popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9136 2023-08-24 18:04 data.exe  

e1253c3fc7018228dbf96a7b3b40f49c


Malicious Library UPX OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		2.0 M 28 ZeroCERT

9137 2023-08-24 18:03 Cabinet.pdf.lnk  

11926797c51a3317a8f749c3a48362d7


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 6.0 13 ZeroCERT

9138 2023-08-24 17:54 InvoicePrinter.exe  

c86f7b00cedb3b932c5a4714cd011a33


Emotet Malicious Library UPX Admin Tool (Sysinternals etc ...) MZP Format PE File PE32 VirusTotal Malware Check memory unpack itself ComputerName Remote Code Execution crashed 		2.4 3 ZeroCERT

9139 2023-08-24 17:54 public.exe  

d9d80ab4056a3d27e3b1783411b0d77f


Malicious Library UPX Malicious Packer PE File PE32 VirusTotal Malware DNS 		1 3.8 3 ZeroCERT

9140 2023-08-24 16:02 Invoke-PowerShellTcp.ps1  

5661f942f86c50b5b845f675613bc1aa


Generic Malware Antivirus VirusTotal Malware unpack itself WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 3.8 28 ZeroCERT

9141 2023-08-24 09:27 datacas.exe  

772cc6d2ad8f559af26b4b6667189e80


Malicious Library UPX OS Processor Check PE File PE32 VirusTotal Malware unpack itself DNS 		1 3.0 M 48 ZeroCERT

9142 2023-08-24 09:25 mm.txt  

d79de8432d47642e80a50eee453fbe4b


Malicious Library UPX OS Processor Check PE File PE32 VirusTotal Malware Malicious Traffic Check memory buffers extracted RWX flags setting AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		1 1 2 5.0 M 36 ZeroCERT

9143 2023-08-24 09:23 d9e1c3_337d702a7383407ea927e15...  

10c83f5b34882b38cfcde8064af6c34b


Generic Malware Antivirus VirusTotal Malware powershell AutoRuns Check memory heapspray Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 2 ZeroCERT

9144 2023-08-24 09:19 a.exe  

288edfb1d7515efc0718938fa4e00b8c


PE File PE64 		ZeroCERT

9145 2023-08-24 09:14 coder.jpg.ps1  

9fd5e336e107dff7b6636e4d3c59ab87


Generic Malware Antivirus Check memory Creates executable files unpack itself WriteConsoleW ComputerName 		1.4 ZeroCERT

9146 2023-08-24 09:14 gen.txt.vbs  

c9a1280f7164b74a827d14578642a559


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 9.0 5 ZeroCERT

9147 2023-08-24 07:41 MsMpEng.exe  

12f224572c9e11c251b32b80bac3796a


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Software crashed keylogger 		1 5 3 12.6 M ZeroCERT

9148 2023-08-24 07:41 wininit.exe  

932b776b87e459c404ae7e9ca38a0c7e


Formbook Confuser .NET AntiDebug AntiVM PE File .NET EXE PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself DNS 		17 18 2 16 8.8 M ZeroCERT

9149 2023-08-24 07:39 igfxEM.exe  

c6920f7f349692b1d32e0cf3ab29717a


UPX Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 PDB Check memory Checks debugger unpack itself crashed 		1.2 M ZeroCERT

9150 2023-08-24 03:53 91ab15acd80b2601_powerp12.pip  

9652b22cedc405b88a700de21ea94bb4

 guest

keyword