popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9541 2023-10-16 18:35 fuljani.exe  

942dbace85ab0d41045bb37a66ccb139


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Buffer PE Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Tofsee ComputerName 		1 2 2 4.8 40 ZeroCERT

9542 2023-10-16 18:35 fuljani.exe  

942dbace85ab0d41045bb37a66ccb139


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Buffer PE Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Tofsee ComputerName 		1 2 2 4.8 40 ZeroCERT

9543 2023-10-16 12:55 gate4.exe  

5c6b1ca0336366662d0f444e01f96a3a


PrivateLoader RedLine stealer Themida Packer Generic Malware UPX Malicious Library VMProtect ScreenShot PWS Socket DGA Http API DNS Internet API SMTP Anti_VM AntiDebug AntiVM PE File PE64 PE32 ZIP Format DLL OS Processor Check PNG Format Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Microsoft Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD sandbox evasion WriteConsoleW anti-virtualization IP Check VM Disk Size Check installed browsers check PrivateLoader Tofsee Ransomware Stealer Windows Update Browser RisePro Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		35 54 31 30.4 M 31 ZeroCERT

9544 2023-10-16 12:52 kenspa.txt.exe  

5a41d36eb69dd4649d09163b8dd7e759


Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 6.6 ZeroCERT

9545 2023-10-16 12:52 kenjkt.txt.exe  

f871241fffd3002353e3ed0eea50daa5


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		3 4 6.8 ZeroCERT

9546 2023-10-16 12:50 bulak.txt.exe  

c630301e6fa6e55bbb4eedeafb870f83


PE File PE32 .NET EXE Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName 		1 2 1 6.8 ZeroCERT

9547 2023-10-16 12:50 investorlokibase64.txt.exe  

548a3fa91d4c14218f61e38fdffaebe7


Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 6.6 ZeroCERT

9548 2023-10-16 12:50 invkmc.jpg.vbs.exe  

7d2913e9f825bd506141c69d609e50dd


PE File DLL PE32 DNS 		1 0.6 ZeroCERT

9549 2023-10-16 12:50 invkmc.jpg2.vbs.exe  

4e6f8a41871bf79323253b90b9c938ff


PE File PE32 		ZeroCERT

9550 2023-10-16 12:50 My2.exe  

df280925e135481b26e921dd1221e359


PE File PE64 VirusTotal Cryptocurrency Miner Malware DNS CoinMiner 		4 1 2.2 47 ZeroCERT

9551 2023-10-16 12:44 toolspub2.exe  

c054b59d8acd94091def95ac0eb1b21d


Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		7.0 32 ZeroCERT

9552 2023-10-16 12:38 x9.x9.x9.x0.x0.x0.doc  

4263e519252b6b43dd6901b64f05133d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash Exploit DNS crashed 		1 1 1 3.8 M 35 ZeroCERT

9553 2023-10-16 12:04 looksoprettyundertheroof.vbs  

c6754754996c3347b6cafe44af0e7cdc


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

9554 2023-10-16 12:04 kenspa.vbs  

a32b1ecc7fc8c489e23976d324d5c4aa


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 18 ZeroCERT

9555 2023-10-16 12:04 kenjkt.vbs  

5029c7922f007aee3bba22e60cab46c6


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 17 ZeroCERT

keyword