popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9301 2023-10-26 13:59 mohammeddroidupdatedfilebase64...  

6070a1b84846a0946639a374043787d6


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware Check memory Checks debugger unpack itself Windows Browser Email ComputerName crashed 		4.0 58 ZeroCERT

9302 2023-10-26 13:23 jajajjajapapapappanananan.vbs  

7e9d44a6c4367491ad178bf62548f136


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 3 ZeroCERT

9303 2023-10-26 13:23 eveningFile.vbs  

088dd62ff5ed6d7e15caab5a0bb62f10


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 3 ZeroCERT

9304 2023-10-26 13:22 aaaaa.txt.exe  

f7a2deae211b49311fa7f56c1e4566f2


Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 62 ZeroCERT

9305 2023-10-26 10:43 HTMLEVENbrowser.dOC  

8ff3248ebdfa3b7dd737f7bee9b9dae6


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 4 2 4.0 M 29 ZeroCERT

9306 2023-10-26 10:41 HTMLIECachesBrowser.dOC  

a08ca8e6fd0e7002499434aa2547d160


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 4 2 4.0 M 29 ZeroCERT

9307 2023-10-26 10:40 foto1661.exe  

7613290b26555e6b7b16131d17331960


Amadey RedLine stealer Gen1 Emotet Generic Malware Malicious Library UPX Antivirus .NET framework(MSIL) Confuser .NET Malicious Packer Admin Tool (Sysinternals etc ...) ScreenShot PWS AntiDebug AntiVM PE File PE32 CAB OS Processor Check .NET E Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware powershell Microsoft AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Exploit Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		25 14 18 6 24.8 40 ZeroCERT

9308 2023-10-26 10:38 Main332.js  

c3cc912df10bafc0de538be5557710ac


AntiDebug AntiVM VirusTotal Malware Code Injection Malicious Traffic wscript.exe payload download Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows DNS 		2 3 2 7.6 2 ZeroCERT

9309 2023-10-26 10:38 T1.js  

caa023ac5ec92dd9fd17b33a448c140a


AntiDebug AntiVM VirusTotal Malware Code Injection wscript.exe payload download Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows DNS 		2 3 8.4 14 ZeroCERT

9310 2023-10-26 10:28 Final rooming list.bat  

98000fd6e24b741927fd81c1d61ae996


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.4 4 ZeroCERT

9311 2023-10-26 10:24 987123.exe  

7ed1926e1e6e2fe6390c3c6d4b8878aa


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 35 ZeroCERT

9312 2023-10-26 10:23 tus.exe  

10a17abe9f1d739be062dfa9f1730298


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware PDB Code Injection buffers extracted 		7.0 32 ZeroCERT

9313 2023-10-26 10:23 davincizx.exe  

9f12d35cb063268ba5e58c71c26ef0e4


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware 		1.4 37 ZeroCERT

9314 2023-10-26 10:23 timeSync.exe  

ab629ce2f730accf1ccfe3c5054d6c1b


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 37 ZeroCERT

9315 2023-10-25 18:27 File.7z  

86f0e6986a754d96179b2c20d8db49b6


PrivateLoader Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Dridex Cryptocurrency Miner Malware Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Discord Browser Trojan DNS Downloader CoinMiner 		80 153 51 29 8.4 M ZeroCERT

keyword