popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9286 2023-08-21 09:29 http://setup.icloud.com  


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3 2 4.2 guest

9287 2023-08-19 05:16 http://sequoia.apple.com  

 guest

9288 2023-08-19 04:40 http://api.maptiler.com  

60c9f86239a45db522e58c777de569f4


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		1 2 4.2 guest

9289 2023-08-19 04:24 http://proxy.safebrowsing.appl...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		1 2 4.2 guest

9290 2023-08-19 04:14 http://api.smoot.apple.com  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		2 5.2 guest

9291 2023-08-18 18:10 s28a1f.exe  

97ae7169e56c372a7d45996303c06d45


Malicious Library PE File PE32 Browser Info Stealer FTP Client Info Stealer suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5.4 ZeroCERT

9292 2023-08-18 18:10 1ds3y.exe  

b78141a544759e1a07740aa28b35584c


Generic Malware Malicious Library UPX Antivirus AntiDebug AntiVM OS Processor Check PE File PE32 PowerShell VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW IP Check Windows ComputerName DNS Cryptographic key crashed 		5 10 3 14.4 M 52 ZeroCERT

9293 2023-08-18 18:04 PolicyChanges.pdf.lnk  

60696fce8c5e2d338afd213a0147d63b


Generic Malware Hide_EXE Suspicious_Script_Bin Downloader Malicious Library UPX Malicious Packer Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger Ant VirusTotal Malware Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW ComputerName 		7 4.4 8 ZeroCERT

9294 2023-08-18 18:01 pass1234_setup.7z  

cd129faa117216c35156304670140b06


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check DNS 		23 48 10 6.2 M ZeroCERT

9295 2023-08-18 17:24 dasHost.exe  

f226785987c5b4c128d4785c6a2d413d


PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key 		2.4 M 23 ZeroCERT

9296 2023-08-18 17:22 ChromeSetup.exe  

e092af3320c668d973ca003e7ecc387f


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		11.8 M 45 ZeroCERT

9297 2023-08-18 17:22 isHost.exe  

700dfeedaf6d739064bdc295eabe23bf


PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.4 M 36 ZeroCERT

9298 2023-08-18 16:09 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

9299 2023-08-18 15:53 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

9300 2023-08-18 15:48 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

keyword