popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9571 2023-10-16 11:08 cred64.dll  

7d6c819c7accbd9abe8f6c4eb087eea2


Browser Login Data Stealer Malicious Library UPX PE File DLL PE64 OS Processor Check VirusTotal Malware PDB Checks debugger installed browsers check Browser ComputerName crashed 		2.4 49 ZeroCERT

9572 2023-10-16 11:06 timeSync.exe  

03a76b21baa5f39e5f592ad2e11a6336


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 36 ZeroCERT

9573 2023-10-16 11:05 humblezx.exe  

9db0aa4d2c28205d89536de9244cb7e8


AgentTesla SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS crashed 		2 4 9.6 56 ZeroCERT

9574 2023-10-16 11:04 gffdgfdgfdg.msi  

d5e7a19ebeaa041c09162cac95747cd1


Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2.8 38 ZeroCERT

9575 2023-10-16 11:03 source2.exe  

f7f4c10dd56dd175ed57b936d3ae87d1


UPX Admin Tool (Sysinternals etc ...) .NET framework(MSIL) Http API ScreenShot Internet API AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications sandbox evasion installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Firmware Cryptographic key 		1 2 2 14.8 48 ZeroCERT

9576 2023-10-16 11:01 treelatestprores.exe  

ff43aae7083352dc2d8251c1e622c737


Lumma Gen1 Emotet Malicious Library UPX Http API ScreenShot Internet API AntiDebug AntiVM PE File PE64 CAB OS Processor Check MSOffice File PNG Format PE32 .NET EXE JPEG Format Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Ransomware Lumma Stealer Windows Exploit Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key crashed 		3 5 8 3 20.8 M 49 ZeroCERT

9577 2023-10-16 11:01 x9.x9.x9.x0.x0.x0.doc  

4263e519252b6b43dd6901b64f05133d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		2.8 35 ZeroCERT

9578 2023-10-16 11:00 pablozx.exe  

be5084e351dfbf93ca2cc522907e4cc6


Formbook .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 2 8.6 54 ZeroCERT

9579 2023-10-16 10:58 rc2.jpg  

9727340e36156ec7295b019317a9c5d5


PE File DLL PE32 VirusTotal Malware crashed 		2.2 44 ZeroCERT

9580 2023-10-16 10:57 sihost.exe  

12e015f7ce3f2092a290eccf26de6889


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 12.6 53 ZeroCERT

9581 2023-10-16 09:56 foto2552.exe  

c7523bca22d87a152b8c10c02736a335


Amadey RedLine stealer Gen1 Emotet Generic Malware Malicious Library UPX Antivirus Admin Tool (Sysinternals etc ...) Malicious Packer ScreenShot PWS AntiDebug AntiVM PE File PE32 CAB PNG Format MSOffice File OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Microsoft AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Exploit Browser Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		49 26 19 3 26.4 M 45 ZeroCERT

9582 2023-10-16 09:47 newrock.exe  

5678c3a93dafcd5ba94fd33528c62276


Amadey Malicious Library UPX Malicious Packer AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check PE64 Malware download Amadey VirusTotal Cryptocurrency Miner Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Kelihos Windows ComputerName Trojan DNS crashed CoinMiner 		5 10 14 4 14.6 M 49 ZeroCERT

9583 2023-10-16 09:45 sihost.exe  

7d53ef9b324f31e4258e85abff6b3024


Malicious Library UPX PE File PE32 OS Processor Check unpack itself 		0.6 M ZeroCERT

9584 2023-10-14 12:59 AppaltQD.exe  

1a687a4c22bfcb3fcf4c19a05d6da9e5


Malicious Library UPX Malicious Packer Antivirus PE File PE32 OS Processor Check VirusTotal Malware PDB Tofsee Remote Code Execution 		2 2 1.8 M 13 ZeroCERT

9585 2023-10-14 12:58 file.exe  

fac282b834711d71edb59aa5fcfa3466


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 39 ZeroCERT

keyword