popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9151 2023-11-03 12:33 JEQnFjDSDMbRhl.vbs  

3acbcc1e0e59f0fa67e43c7e33a413c0


wscript.exe payload download Tofsee crashed 		2 3 1.4 ZeroCERT

9152 2023-11-03 12:33 gRjYtXOvXOp.vbs  

f11a5ac557578737ef391c0b6ad4b333


wscript.exe payload download Tofsee crashed 		2 3 1.4 ZeroCERT

9153 2023-11-03 12:23 lom30.exe  

701ea7974b3f98830d636e93f836cfce


Amadey RedLine stealer Gen1 Emotet SmokeLoader Generic Malware Malicious Library UPX Antivirus Malicious Packer .NET framework(MSIL) Confuser .NET Admin Tool (Sysinternals etc ...) PWS ScreenShot Javascript_Blob AntiDebug AntiVM PE File PE32 Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Email Client Info Stealer Malware powershell Microsoft AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Update Exploit Browser Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		99 43 19 27.4 M ZeroCERT

9154 2023-11-03 12:10 IGCC.exe  

2558474300fbc1c4e924d1cb077696ad


Formbook NSIS Malicious Library UPX PE File PE32 FormBook Malware download Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		3 8 1 2 3.0 M ZeroCERT

9155 2023-11-03 12:08 yandexzx.exe  

92221d94e74c8903e418ad51caaa12ba


PE File PE32 .NET EXE PDB Check memory Checks debugger unpack itself 		1.4 ZeroCERT

9156 2023-11-03 12:06 yulzx.exe  

b38dc9fdc7cb07f8ccd59ed9f1c03b69


LokiBot PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		4 5 10.6 ZeroCERT

9157 2023-11-03 10:38 macringa2.1.exe  

f231a02d229e5f504eacc706629ae2f1


NSIS Malicious Library UPX PE File PE32 VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself 		3.8 M 51 r0d

9158 2023-11-03 10:33 macringa2.1.exe  

f231a02d229e5f504eacc706629ae2f1


NSIS Malicious Library UPX PE File PE32 VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself 		3.8 M 51 r0d

9159 2023-11-03 10:05 marikolock2.1.exe  

1b4bc7eb054142c70e87755de845e039


Formbook NSIS Malicious Library UPX PE File PE32 OS Processor Check FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder Windows 		1 4 1 1 6.4 M 53 r0d

9160 2023-11-03 09:33 marikolock2.1.exe  

1b4bc7eb054142c70e87755de845e039


NSIS Malicious Library UPX PE File PE32 VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself 		3.4 M 53 r0d

9161 2023-11-02 17:02 Xiu2Xiu.exe  

07f36f03342b3b07ecfb8498d0e078a2


Gen1 Malicious Library UPX ASPack Malicious Packer Anti_VM PE File PE64 OS Processor Check DLL ftp wget DllRegisterServer dll Malware Check memory Creates executable files unpack itself Ransomware 		2.8 ZeroCERT

9162 2023-11-02 14:36 File.rar  

c18fbc972354abb0fd945ffccbb93ad3


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows RisePro DNS 		40 62 34 8 7.0 M ZeroCERT

9163 2023-11-02 10:48 WJveX71agmOQ6Gw_1698762642.jpg...  

83c130bed712ef7ac4297b9c9d5f70e9


Generic Malware Antivirus .NET DLL PE File DLL PE32 VirusTotal Malware PDB 		1.0 8 ZeroCERT

9164 2023-11-02 10:32 10dsb.vbs  

d58c876cdf890b6b626d3018a865bbbc


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 5.8 7 ZeroCERT

9165 2023-11-02 10:31 Vbs-File0008765putty.vbs  

359f4448782994c2b42aa0027ee021db


LokiBot Generic Malware Antivirus Socket ScreenShot PWS DNS AntiDebug AntiVM PowerShell FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key Software 		2 3 1 1 16.2 M 17 ZeroCERT

keyword