popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9166 2023-08-23 17:16 iela2f5.exe  

afc2a16ccea74e30714916eb2f59a55e


Generic Malware UPX Malicious Packer PE File PE64 VirusTotal Malware PDB unpack itself Tofsee Remote Code Execution 		1 2 2 1.8 M 37 ZeroCERT

9167 2023-08-23 17:14 000O0oO0o0O0O0o0O0OoO0O000%23%...  

0d1550017594bcc25b972623bc69994a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 4 2 4.0 M 27 ZeroCERT

9168 2023-08-23 17:14 receipt.vbs  

fbc91d72fa61ce79b3a743219e8548b1


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.8 M 5 ZeroCERT

9169 2023-08-23 17:12 mtvn.vbs  

1c95efddfe47d87af3d77d968d285c8c


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 4 1 9.4 7 ZeroCERT

9170 2023-08-23 17:12 igfxEM.exe  

f8f39502518f5ee2cdab32a5288bc667


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Browser Email ComputerName Software crashed 		9.4 M 20 ZeroCERT

9171 2023-08-23 17:10 df.vbs  

047133c0c9174e63bc4a320ee8483aa6


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 7 ZeroCERT

9172 2023-08-23 17:10 0oO0O0O0O0Oo0o000O0O0O0O0O000%...  

cd6a6fc58be90a45c6baad019b482e05


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		2 4 2 4.0 M 26 ZeroCERT

9173 2023-08-23 17:09 wininit.exe  

9cd889e65235a00e96a92e4304307f53


Formbook AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		13 14 2 12 9.8 M 38 ZeroCERT

9174 2023-08-23 17:08 receipt.vbs  

1004c9ac0ce57f200c38355e51e9a200


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.4 6 ZeroCERT

9175 2023-08-23 16:44 sdf.exe  

e67194e6d1a28c86ee3f31ad100bfffa


Malicious Library UPX OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 6.2 23 ZeroCERT

9176 2023-08-23 16:06 calc.exe  

3abbc9069a163b18c039db37099e3e4b


Malicious Library UPX OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		2.2 M 29 yjw

9177 2023-08-23 16:04 calc.exe  

3abbc9069a163b18c039db37099e3e4b


Malicious Library UPX OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		2.2 M 29 yjw

9178 2023-08-23 13:49 Setup_pass1234.7z  

f96a58af45e296c5946f1d3b86920876


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Cryptocurrency Miner Malware c&c Cryptocurrency Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro Remote Code Execution Trojan DNS Downloader 		27 64 37 10 7.4 M ZeroCERT

9179 2023-08-23 10:24 mna.ico.ps1  

2f25a05132eb5f32660bd2b8996cecbb


Generic Malware Antivirus VirusTotal Malware powershell Buffer PE suspicious privilege MachineGuid Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		8.8 12 ZeroCERT

9180 2023-08-23 09:38 http://www.youtube.com  

bfa846eaac246b8b874b7b52a81a2afd


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File icon Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		15 6 2 5.2 guest

keyword