popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9556 2023-10-16 11:52 invlokiwedFile.vbs  

2f91256fa60710cda18cc702684f78ab


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

9557 2023-10-16 11:51 invkmc.jpg.vbs  

7b47208b9424d4beff846d5942f6e384


Hide_EXE Antivirus VirusTotal Malware unpack itself crashed 		1.4 23 ZeroCERT

9558 2023-10-16 11:51 investorlokiiiiiiFile.vbs  

dd13d2f6e0075f0b9bfa13f4493e6db2


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 17 ZeroCERT

9559 2023-10-16 11:23 droiddfffffffffffffFile.vbs  

81526bd6e81d8efbe8a8a364c2b30b1a


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.2 18 ZeroCERT

9560 2023-10-16 11:22 bulaeko.vbs  

3e1ff6eefd4496936edf51fb46144380


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 18 ZeroCERT

9561 2023-10-16 11:22 anykmc.txt.vbs  

02de2b9fc44bc82bf8e627cca8058f0f


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 8.0 26 ZeroCERT

9562 2023-10-16 11:21 x8.x8.x8.x0x0.doc  

c8dfd87f05e2744967e74f93a605827e


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS crashed 		1 1 1 4.2 31 ZeroCERT

9563 2023-10-16 11:20 fronttechnologicalprores.exe  

5a0d618b0f8ed5b550a811e4b1afdf48


Lumma Gen1 Emotet Malicious Library .NET framework(MSIL) UPX Http API ScreenShot Internet API AntiDebug AntiVM PE File PE64 CAB MSOffice File PNG Format .NET EXE JPEG Format PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Ransomware Lumma Stealer Windows Exploit Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key crashed 		3 5 8 3 22.2 M 45 ZeroCERT

9564 2023-10-16 11:16 ns3.jpg  

f394ecfbd02494369cd4cca7a70059fa


ELF VirusTotal Malware 		1.0 33 ZeroCERT

9565 2023-10-16 11:15 build.exe  

f6d470bdfc5dd8dd800580cfa71d1837


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 36 ZeroCERT

9566 2023-10-16 11:12 clip64.dll  

ed15379ed0c9f2e2cc0c105fc8f08896


Amadey Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Malicious Traffic Checks debugger unpack itself DNS 		1 2 3.8 51 ZeroCERT

9567 2023-10-16 11:12 RBY2.exe  

d334fdbe7080a9e36d94001903199491


Amadey Generic Malware UPX Malicious Library Malicious Packer Antivirus PE File PE32 .NET EXE OS Processor Check JPEG Format DLL PE64 Malware download Amadey VirusTotal Cryptocurrency Miner Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW Tofsee Windows ComputerName DNS Downloader CoinMiner 		10 27 18 4 9.8 M 59 ZeroCERT

9568 2023-10-16 11:11 laplas03.exe  

14817abceacc2869286157bc5198ba30


PE File PE64 VirusTotal Malware crashed 		2.2 56 ZeroCERT

9569 2023-10-16 11:10 schtasks.exe  

72aa1d054af015d3b90588e9e0cf04ae


AsyncRAT UPX Malicious Packer .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check 		2 ZeroCERT

9570 2023-10-16 11:10 audiodgse.exe  

be17427d37337c71ac701effd983f143


LokiBot Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		5 4 13.4 53 ZeroCERT

keyword