popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9481 2023-08-14 09:16 KB_20230531.chm  

a6136fa5e2c7d51187221e83e52b9402


Generic Malware Antivirus Hide_URL AntiDebug AntiVM CHM Format powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger heapspray Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Interception Windows Advertising ComputerName Cryptographic key 		3 4 10.4 ZeroCERT

9482 2023-08-14 09:16 1.html  

136ceaa4b76934d78546271c08f51aa2


Antivirus AntiDebug AntiVM MSOffice File Code Injection exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.4 ZeroCERT

9483 2023-08-14 09:13 1.html  

136ceaa4b76934d78546271c08f51aa2


Antivirus unpack itself crashed 		0.6 ZeroCERT

9484 2023-08-14 09:08 cred64.dll  

b71a9d5b854d028a6a9755d9475e5a71


Browser Login Data Stealer UPX Malicious Library OS Processor Check DLL PE64 PE File VirusTotal Malware PDB Checks debugger unpack itself installed browsers check Browser ComputerName DNS crashed 		1 3.4 M 45 ZeroCERT

9485 2023-08-14 09:08 x-8.6.blaze  

69a84378087813dcc137688a49871166


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.4 M 35 ZeroCERT

9486 2023-08-14 09:07 현황조사표.xlsx.lnk  

0eb8db3cbde470407f942fd63afe42b8


Generic Malware Downloader Antivirus Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger Hide_URL AntiDebug AntiVM GIF Format Vulnerability VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		2 1 13.8 27 ZeroCERT

9487 2023-08-14 08:53 clip64.dll  

0e5d0bba336c02519fce133196868ad4


Amadey UPX Malicious Library Admin Tool (Sysinternals etc ...) OS Processor Check DLL PE File PE32 PDB Checks debugger unpack itself 		0.8 ZeroCERT

9488 2023-08-14 07:53 32.exe  

fdb650f759c72c4d408a4da61096ac29


UPX Malicious Library Admin Tool (Sysinternals etc ...) PWS SMTP AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.6 M ZeroCERT

9489 2023-08-14 07:53 wininit.exe  

1188a953c9f36b374ca3714c9de1763e


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		21 22 10 7.8 M ZeroCERT

9490 2023-08-14 07:49 file.exe  

049a6d9199bd6efe409b0ab9fc4cdee6


RedLine stealer UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.2 ZeroCERT

9491 2023-08-14 07:48 file.exe  

9c0492ad620a4028c2f4986a28c409f1


UPX Malicious Library OS Processor Check PE File PE32 PDB DNS 		1 2.6 ZeroCERT

9492 2023-08-14 07:47 wininit.exe  

cb38f35ebcddff1cb735acad8b65096e


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		17 18 10 7.8 M ZeroCERT

9493 2023-08-14 07:46 blackfridaydiscount.exe  

86ee347279e32641070f69e669ec98e2


UPX Malicious Library OS Processor Check PE File PE32 Check memory Checks debugger unpack itself ComputerName 		1.4 ZeroCERT

9494 2023-08-14 07:46 djdffvj.exe  

c8e60225448e9cda23b291b6b16bf78b


UPX Malicious Library OS Processor Check PE File PE32 PDB Remote Code Execution DNS 		2 1.8 ZeroCERT

9495 2023-08-14 07:45 iii.exe  

9a936fa4437b6acf28528e23094339f5


Browser Login Data Stealer Generic Malware Downloader UPX Malicious Library Malicious Packer ScreenShot AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Browser Email ComputerName DNS 		1 3 10.0 M ZeroCERT

keyword