popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9571 2023-08-10 09:49 Allergy List pdf.scr  

5a5268db3190beda118dfc8a2b0cdd56


Gen1 UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Browser Email ComputerName DNS 		8 1 7.4 8 ZeroCERT

9572 2023-08-10 09:48 HYY.vbs  

5c508dd6580c2abe32455a6c29ac32ae


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 17 ZeroCERT

9573 2023-08-10 09:48 NvjRTZU.wsf  

4d0dc8bd843fdd35e8623e22e3ea8f83

wscript.exe payload download unpack itself crashed 		1 2 1.8 ZeroCERT

9574 2023-08-10 09:47 IMG_050823.com  

cea2cada4cb263247472720686e14e41


.NET EXE PE File PE32 PDB Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName 		2 1.6 ZeroCERT

9575 2023-08-10 09:46 HGG.vbs  

aaa8244c698233bc249ddda1e6db6ce6


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.0 M 20 ZeroCERT

9576 2023-08-10 09:44 setup.vbs  

2308efc0d4f8e10e983f3fb5ac87ae8c


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 9.0 M 2 ZeroCERT

9577 2023-08-10 09:44 MSK.vbs  

ae98e919568e778817d4668f82242cf4


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 17 ZeroCERT

9578 2023-08-10 09:40 IGUU.vbs  

31e9ee45e3a0e6c4c020ac248a843a7d


Generic Malware Antivirus Hide_URL PowerShell Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		3 4 11.0 M ZeroCERT

9579 2023-08-10 09:40 ChromeSetup.vbs  

150a2b851e3ccbf928d862a05b37636c


Generic Malware Antivirus UPX Malicious Library PE File PE32 DLL PE64 PNG Format VirusTotal Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 9.4 M 3 ZeroCERT

9580 2023-08-10 09:36 X.vbs  

bf2d0d0575cf2e9bc9de0885bd8fb666


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 9.4 2 ZeroCERT

9581 2023-08-10 09:36 update.vbs  

bb0c35cecf43175858984c3d8bc97e97


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 8.4 2 ZeroCERT

9582 2023-08-10 08:00 images.exe  

fc0b349cceb4042ecb9759e9a519ca95


.NET framework(MSIL) .NET EXE PE File PE32 PDB Check memory Checks debugger unpack itself 		1.4 M ZeroCERT

9583 2023-08-10 07:58 smss.exe  

762df4801061068efc7a2dfbeb555701


.NET framework(MSIL) .NET EXE PE File PE32 PDB Check memory Checks debugger unpack itself 		1.4 M ZeroCERT

9584 2023-08-10 07:57 WmiPrvSE.exe  

f46119800d530db454ce9d90e12d2d67


Formbook NSIS UPX Malicious Library Malicious Packer PE File PE32 suspicious privilege Check memory Creates executable files ICMP traffic unpack itself AppData folder DNS 		23 24 22 4.8 M ZeroCERT

9585 2023-08-10 07:57 damianozx.exe  

aefddcdc823f16072869862f35db8dae


AgentTesla KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 9.6 M ZeroCERT

keyword