popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9391 2023-08-16 07:40 yugozx.exe  

d78d90977bd9addab19038a3367f7804


SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 13.0 31 ZeroCERT

9392 2023-08-16 07:40 chromium.exe  

013a719564fee962f64473767b1e8cd8


Formbook AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD 		2 5 9.8 M 31 ZeroCERT

9393 2023-08-16 07:39 Chromium.exe  

6072355596f3a49926f9bffbaae67427


NSIS UPX Malicious Library PE File PE32 DLL VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder 		20 22 4.2 M 29 ZeroCERT

9394 2023-08-16 07:38 wininit.exe  

b3fc98596e410ebebb2c1f39007abaf5


Generic Malware UPX Malicious Library PE File PE32 DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.4 20 ZeroCERT

9395 2023-08-16 07:37 chromium.exe  

c1ac31ebcbfb8dc95d4eea6d4c95a474


.NET framework(MSIL) Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key 		2.8 M 49 ZeroCERT

9396 2023-08-16 07:36 wininit.exe  

7f162aac8d8d2af6c52e87a85a1547e5


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		17 18 16 8.8 M 26 ZeroCERT

9397 2023-08-16 07:36 wininit.exe  

64870ba5b0e92b05dc383959e02782ce


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD 		22 24 20 9.6 M 48 ZeroCERT

9398 2023-08-16 07:36 chromium.exe  

3333fe1aabfb8bdfd7ad0453b532976a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 47 ZeroCERT

9399 2023-08-15 19:16 builsrtdd.exe  

3656380b872547ff69f460c90328d257


UPX Malicious Library Anti_VM OS Processor Check PE File PE32 VirusTotal Malware MachineGuid Malicious Traffic Creates executable files unpack itself ComputerName DNS crashed 		4 5 4.4 M 37 ZeroCERT

9400 2023-08-15 19:13 hunresgytv.hta  

4e0111996bd46a5eadce11ea29ebae3c


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows Exploit ComputerName DNS Cryptographic key crashed 		9.2 16 ZeroCERT

9401 2023-08-15 19:12 upd-download(st-ct).url  

bad6f985683173fbda122d222a10e010


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection Malicious Traffic Creates shortcut RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3 1 5.0 2 ZeroCERT

9402 2023-08-15 19:12 build1234.exe  

5fb59ec46fd6a15ac0856e37fe226573


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6.2 52 ZeroCERT

9403 2023-08-15 16:15 PNe5J9o1XCKpHYk.exe  

40be18ff344e38f80cec056f5bd97f21


UPX .NET framework(MSIL) Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key 		1 15.4 M 55 guest

9404 2023-08-15 10:44 wininit.exe  

866092635503625027bd65cacbeb3abd


Formbook Generic Malware Antivirus PWS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6 6 11.6 M 39 ZeroCERT

9405 2023-08-15 10:41 000000000000000%23%23%23%23%23...  

856951e629035c756ed107835a218653


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		5 6 5.0 M 32 ZeroCERT

keyword