popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9421 2023-08-14 10:20 md.exe  

02223ae678f09c3b885971903cf8bd63


UPX PE64 PE File VirusTotal Malware unpack itself 		2.4 23 ZeroCERT

9422 2023-08-14 10:20 UnityPlayer.dll  

16af9ec92cb7e2baf47619f06e7ccd7d


UPX Malicious Library OS Processor Check DLL PE64 PE File VirusTotal Malware Code Injection 		2.2 22 ZeroCERT

9423 2023-08-14 09:31 NearbyInteractionLogging.mobil...  

269d8959a6e14de4140a33940eafd927


ScreenShot AntiDebug AntiVM Check memory unpack itself 		1.0 guest

9424 2023-08-14 09:29 hanacard_20230610.chm  

a28bb1ece40acad5522365f8959a073c


Generic Malware Antivirus Hide_URL AntiDebug AntiVM CHM Format powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Interception Windows ComputerName Cryptographic key 		3 4 1 6.6 M ZeroCERT

9425 2023-08-14 09:23 1.html  

2b86cc9776d43c7916f5044a092c866d


Antivirus AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.8 4 ZeroCERT

9426 2023-08-14 09:16 KB_20230531.chm  

a6136fa5e2c7d51187221e83e52b9402


Generic Malware Antivirus Hide_URL AntiDebug AntiVM CHM Format powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger heapspray Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Interception Windows Advertising ComputerName Cryptographic key 		3 4 10.4 ZeroCERT

9427 2023-08-14 09:16 1.html  

136ceaa4b76934d78546271c08f51aa2


Antivirus AntiDebug AntiVM MSOffice File Code Injection exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.4 ZeroCERT

9428 2023-08-14 09:13 1.html  

136ceaa4b76934d78546271c08f51aa2


Antivirus unpack itself crashed 		0.6 ZeroCERT

9429 2023-08-14 09:08 cred64.dll  

b71a9d5b854d028a6a9755d9475e5a71


Browser Login Data Stealer UPX Malicious Library OS Processor Check DLL PE64 PE File VirusTotal Malware PDB Checks debugger unpack itself installed browsers check Browser ComputerName DNS crashed 		1 3.4 M 45 ZeroCERT

9430 2023-08-14 09:08 x-8.6.blaze  

69a84378087813dcc137688a49871166


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.4 M 35 ZeroCERT

9431 2023-08-14 09:07 현황조사표.xlsx.lnk  

0eb8db3cbde470407f942fd63afe42b8


Generic Malware Downloader Antivirus Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger Hide_URL AntiDebug AntiVM GIF Format Vulnerability VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		2 1 13.8 27 ZeroCERT

9432 2023-08-14 08:53 clip64.dll  

0e5d0bba336c02519fce133196868ad4


Amadey UPX Malicious Library Admin Tool (Sysinternals etc ...) OS Processor Check DLL PE File PE32 PDB Checks debugger unpack itself 		0.8 ZeroCERT

9433 2023-08-14 07:53 32.exe  

fdb650f759c72c4d408a4da61096ac29


UPX Malicious Library Admin Tool (Sysinternals etc ...) PWS SMTP AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.6 M ZeroCERT

9434 2023-08-14 07:53 wininit.exe  

1188a953c9f36b374ca3714c9de1763e


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		21 22 10 7.8 M ZeroCERT

9435 2023-08-14 07:49 file.exe  

049a6d9199bd6efe409b0ab9fc4cdee6


RedLine stealer UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.2 ZeroCERT

keyword