popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9271 2023-10-28 11:51 timeSync.exe  

a666eac4d7ffb6c00bbc79b627e1c660


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		1.6 29 ZeroCERT

9272 2023-10-27 19:47 북한최고인민회의 결과.lnk  

cc96ba45dd2b6a6d7aa300d77e49c095


Generic Malware Downloader Antivirus HWP PS PostScript Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P Hide_URL AntiDebug AntiVM Lnk Format MSOffice VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 11.2 28 guest

9273 2023-10-27 18:04 cred64.dll  

1c27631e70908879e1a5a8f3686e0d46


Amadey Browser Login Data Stealer Malicious Library UPX PE File DLL PE64 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB MachineGuid Malicious Traffic Checks debugger unpack itself Windows utilities sandbox evasion human activity check installed browsers check Windows Browser DNS Software 		2 1 1 7.8 49 ZeroCERT

9274 2023-10-27 18:04 clip64.dll  

ceffd8c6661b875b67ca5e4540950d8b


Amadey Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Malicious Traffic Checks debugger unpack itself DNS 		2 1 1 3.8 49 ZeroCERT

9275 2023-10-27 17:05 xlammexpoittt.vbs  

9595077ef106c2510f73d0132ea81155


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		4 6 2 10.2 5 ZeroCERT

9276 2023-10-27 17:04 cleanupdate.exe  

c9aa05e75a369370955cf71b12a2121a


Browser Login Data Stealer Amadey Hide_EXE Malicious Library UPX Http API ScreenShot HTTP Code injection Internet API AntiDebug AntiVM PE File PE32 .NET EXE JPEG Format DLL PE64 OS Processor Check Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		4 2 5 20.0 M 23 ZeroCERT

9277 2023-10-27 17:03 HTMLXLAMieBrowser.dOC  

baeaa0fda1df43a65dc12777327db43b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 3 4.0 M 28 ZeroCERT

9278 2023-10-27 13:28 rumpe.jpg.exe  

85fa49d81d22418534ded291306be57d


Malicious Library UPX .NET DLL PE File DLL PE32 OS Processor Check VirusTotal Malware PDB 		1.4 27 ZeroCERT

9279 2023-10-27 13:24 obm.txt.exe  

697ebf34888a6672c7ade14701fe2c00


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer Email Client Info Stealer suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName crashed 		2.6 ZeroCERT

9280 2023-10-27 12:25 File.7z  

3c62d34e99c4d0766c6a30aff0ff00d4


PrivateLoader Stealc Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser Trojan DNS Downloader 		55 91 42 23 6.8 M ZeroCERT

9281 2023-10-27 10:58 ngown.vbs  

74558dda2ee55f1223e34b0e18411764


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 5 2 9.6 M 5 ZeroCERT

9282 2023-10-27 10:56 don.vbs  

049cbf1fa6fb0b213b5d6aace06efbd9

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

9283 2023-10-27 10:54 ngone.vbs  

bb1a98b873c6fbebb5c2bab804fbe831

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

9284 2023-10-27 10:54 bdolsx.vbs  

44c457dd13efcd6622b1b6dbab5c1965

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

9285 2023-10-27 10:13 ereeeeeeeeeeeefereFile.vbs  

73d2fd40cb82f20bb3d340720da666d0


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 3 ZeroCERT

keyword