popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9151 2023-08-24 03:41 11-21-1183-04-00bi-device-fing...  

a5d5c45e3bd16c3507e766a6df7592f0


ZIP Format unpack itself 		0.4 guest

9152 2023-08-23 18:46 000000000000000000000000000%23...  

dcbcfd6de58204d8a29f0d173e88e34d


MS_RTF_Obfuscation_Objects RTF File doc exploit crash Exploit DNS crashed 		1 3.0 M ZeroCERT

9153 2023-08-23 18:12 000000000000000000000000000%23...  

dcbcfd6de58204d8a29f0d173e88e34d


MS_RTF_Obfuscation_Objects RTF File doc exploit crash unpack itself Exploit DNS crashed 		1 3.4 ZeroCERT

9154 2023-08-23 17:31 x.vbs  

3f6bf228afaad7e9e49b3502801f3b40


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 5.2 4 ZeroCERT

9155 2023-08-23 17:27 idex.vbs  

184a8350f23b2b74fc1877165fd75dbb


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.4 M 6 ZeroCERT

9156 2023-08-23 17:27 afk.vbs  

394cb016b49972ef3d60a438b0ba7600


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 4 1 9.4 M 6 ZeroCERT

9157 2023-08-23 17:25 CompPkgSrv.exe  

b21b7a7c3470ec539fbfb187a361c894


PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 2 3.8 M 30 ZeroCERT

9158 2023-08-23 17:25 receipt_231123.vbs  

5209552db61b19cc3dcffe60168f4359


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.8 M 22 ZeroCERT

9159 2023-08-23 17:23 smito.vbs  

731185eac99c29852de43d3bd7c1a79f


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 4 1 11.0 M 6 ZeroCERT

9160 2023-08-23 17:23 smss.exe  

6611d09b189022dc685a871698f02144


.NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.6 M 32 ZeroCERT

9161 2023-08-23 17:21 hueyzx.exe  

4a6361df182ee84fb216f44262105ddc


.NET framework(MSIL) PWS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious TLD ComputerName DNS 		3 5 1 10.4 M 28 ZeroCERT

9162 2023-08-23 17:21 CompPkgSrv.exe  

9b3c1edaa709d4ab07401fae17223b60


PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 2 3.8 M 30 ZeroCERT

9163 2023-08-23 17:19 soman.exe  

25ea22fd38b4c9529f7443250622e910


Malicious Library UPX AntiDebug AntiVM OS Processor Check PE File PE32 DLL VirusTotal Malware PDB Code Injection Checks debugger Creates executable files unpack itself AppData folder Remote Code Execution 		4.2 M 29 ZeroCERT

9164 2023-08-23 17:18 pee.vbs  

70473f7851537bd689bab2ac33325091


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 4 1 10.4 M 6 ZeroCERT

9165 2023-08-23 17:16 weobmaaaa.vbs  

9103ec9c65ba23dc4ff1dbe225475806


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 M 5 ZeroCERT

keyword