popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9376 2023-08-16 17:11 SuWar3Tools.exe  

ef8272b8854963717097c26092490bf5


RedLine Infostealer UltraVNC UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder Windows Cryptographic key crashed 		5 8 8.4 M 47 ZeroCERT

9377 2023-08-16 15:07 password.chm  

b5f9cd67cb32f44c138c382e17b06fd6


Generic Malware Antivirus Hide_URL AntiDebug AntiVM CHM Format powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Interception Windows ComputerName Cryptographic key 		1 2 1 6.6 M ZeroCERT

9378 2023-08-16 10:58 hanacard.chm  

2002dd3cf9e2ef96b74a99eee0dd5ec1


Generic Malware Antivirus AntiDebug AntiVM CHM Format PowerShell BMP Format VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10 6 9.0 21 ZeroCERT

9379 2023-08-16 10:20 2.exe  

294fab1523dc3b50cbcc120e67946a5b


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware DNS 		1 3.4 M 56 guest

9380 2023-08-16 09:53 nine18.js  

92cd4dca66b5bebf62d5bdf1454ab6de


Generic Malware Antivirus VirusTotal Malware powershell AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		12 2 9.2 13 ZeroCERT

9381 2023-08-16 09:53 www.vbs  

c863717ead17c4488aa7f85b33ba8b20


WSHRAT Hide_EXE Anti_VM PE File VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download Creates executable files ICMP traffic unpack itself AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS crashed Dropper 		2 4 1 10.0 M 24 ZeroCERT

9382 2023-08-16 09:50 pass1234_setup.7z  

11786f2176a86c420e8ed701afb50b17


Escalate priviledges PWS KeyLogger Anti_VM AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check DNS DDNS 		30 51 10 7.0 M ZeroCERT

9383 2023-08-16 09:39 chromium.vbe  

8e99881fa155be4f5705fddd924ecd63


Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 9.4 2 ZeroCERT

9384 2023-08-16 09:38 6271c26a5690c43c59c23239_PDF2-...  

4ba303dbb08db50b93fdcf0494257467


PDF ZIP Format Windows utilities Windows 		5 1.4 ZeroCERT

9385 2023-08-16 09:37 invoice.exe  

47699e23b8a46230799ae564517d7519


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		1 2.2 M 44 ZeroCERT

9386 2023-08-16 09:00 Capture_Data.dmg  

74b6e3b8b30844ab6637b09465a8deae


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

9387 2023-08-16 07:52 addo.exe  

6730aa28aed92b39ba1a23d43c45399a


AgentTesla Generic Malware UPX Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 Browser Info Stealer Email Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName crashed 		2 9.8 ZeroCERT

9388 2023-08-16 07:45 Chromium.exe  

903d5f8adb6f17e25f419df6db9c6a77


NSIS UPX Malicious Library PE File PE32 DLL VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder Windows 		3 6 5.6 38 ZeroCERT

9389 2023-08-16 07:43 00000000000o0o0o0o0O0O0O0O000o...  

64c604cd64a22ab5d6f05ea9770c3212


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS crashed 		2 5 4.0 28 ZeroCERT

9390 2023-08-16 07:42 client32.exe  

a2b46c59f6e7e395d479b09464ecdba0


UPX PE File PE32 VirusTotal Malware PDB 		0.6 5 ZeroCERT

keyword