popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9451 2023-10-19 07:59 audiodgse.exe  

d7bde041b821e3b3e6e3a71846cee9ef


Formbook NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself DNS 		5 11 1 5 4.8 M 40 ZeroCERT

9452 2023-10-19 07:56 audiodgse.exe  

5f19da54cd1ddcef58de1e0bdf595459


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 M 40 ZeroCERT

9453 2023-10-19 07:55 system32.exe  

d1e40dfbae57e5f3205117f5c9d64a76


Vidar Gen1 Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Telegram MachineGuid Malicious Traffic Check memory WMI Creates shortcut Creates executable files unpack itself Collect installed applications Check virtual network interfaces AntiVM_Disk sandbox evasion anti-virtualization VM Disk Size Check installed browsers check Tofsee Browser Email ComputerName DNS Software crashed 		4 5 4 1 13.2 M 49 ZeroCERT

9454 2023-10-19 07:54 audiodgse.exe  

0ea00cd19382a471a5f599c54dff91f1


UPX .NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 42 ZeroCERT

9455 2023-10-19 07:52 audiodgse.exe  

834f8d3c68e80cb0288dac71275bf89a


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 47 ZeroCERT

9456 2023-10-19 07:52 undergroundzx.exe  

050408a7ec8e1c0ef8a7e417fbccc299


LokiBot .NET framework(MSIL) PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Discord Browser Email ComputerName DNS Software crashed keylogger 		1 4 6 13.4 M 29 ZeroCERT

9457 2023-10-19 07:50 audiodgse.exe  

8ed749953dfc694808ed27f1aea08b71


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 12.6 M 30 ZeroCERT

9458 2023-10-19 07:49 damianozx.exe  

487fa93e89fd1ec0969e0083966714bd


PWS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 9.8 M 27 ZeroCERT

9459 2023-10-19 02:14 Rechung-87_PDF.js.pdf  

64b82476268205bc28b7fccca5808cf0


PDF 		guest

9460 2023-10-18 18:04 sogn.exe  

b67ddf6cef57729b557a66460c0b6dd4


UPX .NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 M 43 ZeroCERT

9461 2023-10-18 18:01 test.exe  

3939345bad08812d7dba41f064c1665d


Malicious Packer PE File PE32 VirusTotal Malware unpack itself DNS 		2 3.6 M 62 ZeroCERT

9462 2023-10-18 18:00 arinzezx.exe  

e25e15eb096d884c88cce0f4e079d2de


UPX .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Browser Email ComputerName Software crashed 		2 2 10.8 M 41 ZeroCERT

9463 2023-10-18 17:57 123.exe  

62914a3d73d59716bd8dbbbd947f6a02


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 M 55 ZeroCERT

9464 2023-10-18 17:55 abun.exe  

85b7d14c272f7d0ad66a74ec947b7677


UPX .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		4 5 12.0 M 32 ZeroCERT

9465 2023-10-18 17:55 obizx.exe  

d08792fa3031b847d0fd6bd56d10ee93


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 40 ZeroCERT

keyword