popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9181 2023-11-02 07:46 litoptics2.1.exe  

77e2b6a251b3ed0440f515824c1d67fd


PE File PE32 .NET EXE PDB Check memory Checks debugger unpack itself 		1.4 ZeroCERT

9182 2023-11-02 07:46 haloup.exe  

3e6ed1ceb52c1d4e9ef09cd3aebe7741


Malicious Library UPX PE File PE64 OS Processor Check 		0.2 ZeroCERT

9183 2023-11-01 19:37 Biacs.exe  

8bbba1d1448825a0c428dc296573cf8d


Formbook AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious TLD Windows DNS Cryptographic key 		21 24 12 18 11.0 M 30 ZeroCERT

9184 2023-11-01 18:48 IGCC.exe  

f26a2f5b20109013af6303c9adc2546d


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Generic Malware Google Chrome User Data Downloader .NET framework(MSIL) Antivirus Create Service Socket ScreenShot Escalate priviledges PWS Sniff Audio DNS Internet API KeyLogger AntiDebu Remcos VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS keylogger 		1 4 3 13.4 M 27 ZeroCERT

9185 2023-11-01 18:47 2xf9uf.bat  

0f74a2178106172bd65f8bda36eb2572


Generic Malware Downloader Antivirus UPX Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		5.8 6 ZeroCERT

9186 2023-11-01 18:46 htmlIREcontentwritingcache.doc  

0e17386f4c9bd1dc872a1b00a5ec1ce0


MS_RTF_Obfuscation_Objects RTF File doc Malware download Remcos VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS DDNS crashed 		2 5 8 4.6 M 30 ZeroCERT

9187 2023-11-01 18:42 Archive.rar  

8988dd76e0075a66d1030daa58d220f1


Escalate priviledges PWS KeyLogger AntiDebug AntiVM ftp Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee DNS 		5 13 8 2 5.0 M 1 ZeroCERT

9188 2023-11-01 18:39 IGCC.exe  

d49b62e60e0e42b43f32adf23acfd369


UPX .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 49 ZeroCERT

9189 2023-11-01 09:58 questionnaire.exe  

065f0871b6025b8e61f35a188bca1d5c


Generic Malware Malicious Library Anti_VM PE File PE64 ftp OS Processor Check VirusTotal Malware Check memory Creates executable files unpack itself Check virtual network interfaces DNS crashed 		2 1 3.4 13 ZeroCERT

9190 2023-11-01 09:58 document_issued_ticket.bat  

36615e952d3d0230e01c4aa0007c5cfa


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities WriteConsoleW Windows ComputerName Cryptographic key 		3.4 2 ZeroCERT

9191 2023-11-01 09:48 settings.md.ps1  

d4a8463332d11c465c311485626a089e


Lnk Format GIF Format VirusTotal Malware powershell AutoRuns MachineGuid Check memory Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 4 1 7.2 M 15 ZeroCERT

9192 2023-11-01 09:47 vpke8.js  

64fb844512400c176e18d956894663dd

crashed 		0.2 ZeroCERT

9193 2023-11-01 09:44 CNOZ1237_3680420.js  

8bc1516039ff6f4e48087ae01613c98a

VirusTotal Malware WMI ComputerName 		1.4 2 guest

9194 2023-11-01 09:40 pwdw54.js  

13d3bf04f274c2d9282623217acbbb5e

unpack itself crashed 		0.6 ZeroCERT

9195 2023-11-01 09:39 3mmusbi9y.js  

e6e3eb6eddb12bdddc85bb59707dd4e4

crashed 		0.2 ZeroCERT

keyword