popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9241 2023-10-30 17:41 HTMLIEcontentHistory.vbs  

329ec572360f8e6cdddd1d7304e77001


VirusTotal Malware wscript.exe payload download Tofsee 		1 2 2 2.0 M 5 ZeroCERT

9242 2023-10-30 17:40 HTMLhistoryClearner.dOC  

ab5d39905d80955d987393bd55dc63af


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Tofsee Exploit crashed 		2 3 2.6 M 29 ZeroCERT

9243 2023-10-30 17:40 HTMLIEsearchHistory.vbs  

c3331ba028e5bac96943a698e5147891


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 4 2 9.0 M 5 ZeroCERT

9244 2023-10-30 17:38 trafico.exe  

317c1da3d49d534fdde575395da84879


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 6.4 M 51 ZeroCERT

9245 2023-10-30 17:36 timeSync.exe  

6b8fb6abd4fe5a7d07dec0810d2419f6


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.0 M 47 ZeroCERT

9246 2023-10-30 17:35 build.exe  

ebf343196e0bbc5310da9150fcb5cc5f


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		1.8 M 35 ZeroCERT

9247 2023-10-30 09:53 File.7z  

af9d7f78e54912ec053e221309ce9288


PrivateLoader Stealc Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser RisePro Trojan DNS Downloader 		57 105 48 27 7.0 M ZeroCERT

9248 2023-10-30 07:52 123.exe  

e374462a741bd8b228f22b33bb62f83f


Emotet Gen1 Generic Malware NSIS Malicious Library UPX Malicious Packer Antivirus Admin Tool (Sysinternals etc ...) Anti_VM AntiDebug AntiVM PE File PE64 OS Processor Check PNG Format PE32 DLL MZP Format ZIP Format JPEG Format DllRegisterServer dll BMP Malware download Cryptocurrency Miner Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check Tofsee Ransomware Windows ComputerName DNS crashed Downloader CoinMiner 		9 29 15 3 19.4 M ZeroCERT

9249 2023-10-28 19:08 xlaexpoittt.vbs  

08c5dddd1b41a03887c72314ea20d249


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 5 2 9.6 7 ZeroCERT

9250 2023-10-28 19:04 cincocicnnc.vbs  

13f5fea2cf9c8eab90170dfda8194c09

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 8 ZeroCERT

9251 2023-10-28 19:04 ngfor.vbs  

974b499ef10e95adc829e98ec09d6565

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 8 ZeroCERT

9252 2023-10-28 18:57 HTMLIEBrowserhistory.doc  

f7b8200be0d768ab8fdc7ef3203267e8


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash Tofsee Exploit DNS crashed 		4 6 3 1 3.6 M 29 ZeroCERT

9253 2023-10-28 18:53 HTMLDesginBrowserInternet.dOC  

c6f17e9d8c72950b1100f1ab9c3ab77d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.2 M 26 ZeroCERT

9254 2023-10-28 18:50 HTMLIEbrowserHistoryClean.doc  

5ad1dfb31daa5015f4fdc8af08b50ae9


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash Tofsee Exploit crashed 		2 3 2.4 M 30 ZeroCERT

9255 2023-10-28 13:00 KLV.txt.exe  

ad0080738beb0f1c978ebd471e918ffe


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 5.2 42 ZeroCERT

keyword