popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9451 2023-08-16 07:36 wininit.exe  

7f162aac8d8d2af6c52e87a85a1547e5


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		17 18 16 8.8 M 26 ZeroCERT

9452 2023-08-16 07:36 wininit.exe  

64870ba5b0e92b05dc383959e02782ce


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD 		22 24 20 9.6 M 48 ZeroCERT

9453 2023-08-16 07:36 chromium.exe  

3333fe1aabfb8bdfd7ad0453b532976a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 47 ZeroCERT

9454 2023-08-15 19:16 builsrtdd.exe  

3656380b872547ff69f460c90328d257


UPX Malicious Library Anti_VM OS Processor Check PE File PE32 VirusTotal Malware MachineGuid Malicious Traffic Creates executable files unpack itself ComputerName DNS crashed 		4 5 4.4 M 37 ZeroCERT

9455 2023-08-15 19:13 hunresgytv.hta  

4e0111996bd46a5eadce11ea29ebae3c


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows Exploit ComputerName DNS Cryptographic key crashed 		9.2 16 ZeroCERT

9456 2023-08-15 19:12 upd-download(st-ct).url  

bad6f985683173fbda122d222a10e010


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection Malicious Traffic Creates shortcut RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3 1 5.0 2 ZeroCERT

9457 2023-08-15 19:12 build1234.exe  

5fb59ec46fd6a15ac0856e37fe226573


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6.2 52 ZeroCERT

9458 2023-08-15 16:15 PNe5J9o1XCKpHYk.exe  

40be18ff344e38f80cec056f5bd97f21


UPX .NET framework(MSIL) Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key 		1 15.4 M 55 guest

9459 2023-08-15 10:44 wininit.exe  

866092635503625027bd65cacbeb3abd


Formbook Generic Malware Antivirus PWS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6 6 11.6 M 39 ZeroCERT

9460 2023-08-15 10:41 000000000000000%23%23%23%23%23...  

856951e629035c756ed107835a218653


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		5 6 5.0 M 32 ZeroCERT

9461 2023-08-15 10:40 crypted.exe  

97ec989085e99d2df0426b73620812b0


UPX Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware Code Injection Check memory buffers extracted unpack itself Collect installed applications sandbox evasion WriteConsoleW anti-virtualization installed browsers check Browser ComputerName DNS 		1 1 10.4 M 52 ZeroCERT

9462 2023-08-15 10:39 EGK.vbs  

6b1d1a7455742408ac22e8d243998296


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		3 3 8.8 M 2 ZeroCERT

9463 2023-08-15 10:36 ewrqqfaaa.exe  

3798e6dae3df606799111b63bf54aad9


UPX Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware Checks debugger Remote Code Execution 		1.6 M 14 ZeroCERT

9464 2023-08-15 10:35 C1pNaIqyfDshEdy.exe  

c36113ac380951204651c549f3eab824


Formbook NSIS UPX Malicious Library ASPack PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		4 8 1 4.6 M 40 ZeroCERT

9465 2023-08-15 10:33 chrme.exe  

5b04c44af744f95bf670840cea457616


ASPack PE File PE32 VirusTotal Malware suspicious privilege sandbox evasion Browser ComputerName Remote Code Execution 		3.6 M 23 ZeroCERT

keyword