popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9496 2023-10-18 07:47 timeSync.exe  

3a77fc04743664066168d91666d06b5f


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 40 ZeroCERT

9497 2023-10-18 07:47 Qconngovaq.exe  

9bd29cbf6a0bc205a1202a1c61ce8989


UPX .NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows ComputerName DNS Cryptographic key 		1 1 6.2 40 ZeroCERT

9498 2023-10-17 17:01 Setup.7z  

72cbddd810e52a32ffed4a5db1faeb1d


Stealc PrivateLoader Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Dridex Malware c&c Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Stealc Stealer Windows RisePro Trojan DNS 		47 75 40 19 6.0 M ZeroCERT

9499 2023-10-17 17:00 ChromeSetup.exe  

7d09d9b412845150b51c52503339f52e


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 31 ZeroCERT

9500 2023-10-17 16:58 angel.exe  

a6f75b1e5f8b4265869f7e5bdcaa3314


Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB Malicious Traffic Check memory buffers extracted Collect installed applications sandbox evasion installed browsers check Ransomware Lumma Stealer Browser ComputerName Firmware 		1 2 2 7.4 M 25 ZeroCERT

9501 2023-10-17 16:58 0d735167.exe  

7d09d9b412845150b51c52503339f52e


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 31 ZeroCERT

9502 2023-10-17 16:44 smss.exe  

73f54afbcdc80fdb3c3dd8a0e9fa1c32


Formbook UPX .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 4 1 9.6 M 15 ZeroCERT

9503 2023-10-17 16:42 bQGy.exe  

a60c2e8459387329e1dbe2d3625ee2c8


PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 3 1 3.8 55 ZeroCERT

9504 2023-10-17 16:42 owenzx.exe  

944cbd3720565dd3132d42deaaf25cb3


Formbook AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		2 5 2 2 8.6 M 21 ZeroCERT

9505 2023-10-17 16:40 Ermnnolfu.exe  

7ba214f8174004943d83942dda0f9731


Downloader UPX PWS KeyLogger Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential Sniff Audio HTTP DNS Code injection Internet API FTP P2P AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 4 1 14.4 48 ZeroCERT

9506 2023-10-17 16:28 Archive.7z  

14cf80a7fd8a77c3eaed98b8ec615eb4


Stealc PrivateLoader Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Dridex Malware c&c Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Kelihos Tofsee Stealc Stealer Windows Browser RisePro Trojan DNS plugin 		56 80 54 21 6.4 M ZeroCERT

9507 2023-10-17 10:52 at.hta  

b3a69d39ea2f074e520077721b475d51


Generic Malware Antivirus AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		1 3 2 1 12.4 M 26 ZeroCERT

9508 2023-10-17 10:42 uwp4072801.png.exe  

e0154733596f482f5feff0f3b5b5cadf


Malicious Library UPX .NET DLL PE File DLL PE32 OS Processor Check VirusTotal Malware PDB 		1.4 22 ZeroCERT

9509 2023-10-17 10:38 opt-63.js  

27677b638817a290b98a867a960e28a1


AntiDebug AntiVM Malware Code Injection Malicious Traffic wscript.exe payload download unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows DNS crashed 		2 3 2 8.4 guest

9510 2023-10-17 10:38 opt-66.js  

a8715ee933ba762489a918d77d89030d


AntiDebug AntiVM Malware Code Injection Malicious Traffic Check memory wscript.exe payload download unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows DNS crashed 		2 3 2 8.0 guest

keyword