popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9346 2023-10-24 14:55 build.exe  

3ed791d0d3ef43adf351275e0e2d5eb1


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 35 ZeroCERT

9347 2023-10-24 14:41 mashilao.txt.exe  

da5957bd18549edc1c451f1ab98aa4c5


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName crashed 		3.8 56 ZeroCERT

9348 2023-10-24 10:03 setup.7z  

4c65dedbb73fbb8d9daae8179d67082b


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Lumma Stealer DNS 		8 13 6 2 4.2 M ZeroCERT

9349 2023-10-24 09:41 luoves.vbs  

0ce3fdcbefda30517ac10b2fdf96f426


AgentTesla Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PowerShell Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee EXPLOIT_KIT Windows Exploit Browser Email ComputerName DNS Cryptographic key crashed 		2 3 2 1 15.2 M 15 ZeroCERT

9350 2023-10-24 09:37 stodio.ps1  

0c98e19efb1135d07bb79af8bee0956d


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself Windows Cryptographic key 		1.2 6 ZeroCERT

9351 2023-10-24 09:37 millianozx.doc  

b394ab992ac85ab0fefc4a7d3d181bbd


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash suspicious TLD Windows Exploit DNS crashed 		11 12 5 4.4 M 33 ZeroCERT

9352 2023-10-24 09:36 2.txt.ps1  

aadf28a8133c1568c175e89318d94c7c


Generic Malware Antivirus VirusTotal Malware unpack itself WriteConsoleW Windows Cryptographic key 		1 1.2 6 ZeroCERT

9353 2023-10-24 07:55 sus.exe  

7412fa29d56312aeba1f8b6270233b3c


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check Malware PDB Code Injection buffers extracted DNS 		1 7.0 M ZeroCERT

9354 2023-10-24 07:54 millianozx.exe  

457727c9b8dd78217d49bea020449909


AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AppData folder Browser DNS 		14 17 10.4 M 30 ZeroCERT

9355 2023-10-24 07:51 angi.exe  

f281b31a99932f0d6c1fa3dd0649a36a


Gen1 Generic Malware Malicious Library UPX Antivirus PE File PE64 OS Processor Check DLL PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB Malicious Traffic Check memory Checks debugger buffers extracted unpack itself AppData folder sandbox evasion Ransomware Lumma Stealer Browser ComputerName 		1 2 2 7.2 M 37 ZeroCERT

9356 2023-10-24 07:50 texaszx.exe  

2aaebe44a0a2a7f2512f13a45a979406


PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		6 4 10.8 M 29 ZeroCERT

9357 2023-10-24 07:50 foto2552.exe  

5e967436bbe28a1b2b6d4016ae7b5024


Amadey RedLine stealer Gen1 Emotet Malicious Library UPX Admin Tool (Sysinternals etc ...) ScreenShot PWS AntiDebug AntiVM PE File PE32 CAB PNG Format MSOffice File DLL OS Processor Check Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware Microsoft AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Exploit Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		24 18 13 4 20.2 M ZeroCERT

9358 2023-10-24 07:48 snow.exe  

bd136d61e094dd46fae5f3fda5d18d48


LokiBot PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		4 5 14.4 M 43 ZeroCERT

9359 2023-10-24 07:48 nalo.exe  

35ec78636adb2e2094fc506736d9ffe1


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check Malware download VirusTotal Malware PDB Code Injection Malicious Traffic buffers extracted unpack itself Stealc Browser DNS 		1 1 2 1 8.2 M 19 ZeroCERT

9360 2023-10-24 07:48 newmar.exe  

6020dace849357f1667a1943c8db7291


Emotet Gen1 Malicious Library UPX Confuser .NET AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check icon PE64 DllRegisterServer dll MZP Format DLL VirusTotal Cryptocurrency Miner Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS crashed CoinMiner 		7 6 11.4 M 56 ZeroCERT

keyword