popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9616 2023-08-09 17:02 setup294.exe  

bf6993bcabf40b1643e5d7abf6710762


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 DLL PDB Code Injection Checks debugger unpack itself AppData folder Remote Code Execution 		2.6 ZeroCERT

9617 2023-08-09 14:24 Pass1234_file.7z  

8c849c3860d4cde88ae04546492f17dc


Vidar Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check DNS 		52 59 15 6.6 ZeroCERT

9618 2023-08-09 11:29 MAINNODECPa.htm  

4a8582251db1eb736e1dc4c60fed358e


Generic Malware Antivirus AntiDebug AntiVM powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		2 7.2 ZeroCERT

9619 2023-08-09 11:24 logszx.exe  

f0ffc9ea823029c0b1c45026306957d5


PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed 		2 10.4 ZeroCERT

9620 2023-08-09 11:21 lnvoice#20336 ...  

8280d77f1fe4f3ad7e067180f6cf1ad9

VirusTotal Malware Check memory buffers extracted unpack itself suspicious process Interception 		2 6 5.8 13 ZeroCERT

9621 2023-08-09 11:14 Konni.lnk  

49fbfece9d180b55661816d29fd2af8a


Generic Malware HWP PS PostScript Antivirus AntiDebug AntiVM GIF Format MSOffice File PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.0 22 ZeroCERT

9622 2023-08-09 11:05 logszx.doc  

2c6c2c3fbdd819ee45b543d6632f842f


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash Exploit DNS crashed 		1 3 4.8 M 31 ZeroCERT

9623 2023-08-09 10:24 ChromeSetup.exe  

fe2a74503249b20e4594656bb88db37d


Formbook AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 2 9.8 M 31 ZeroCERT

9624 2023-08-09 10:24 soc64win.dll  

62813c6cab9234e83949fcc563c33b57


VMProtect Malicious Library DLL PE64 PE File VirusTotal Malware Checks debugger unpack itself DNS 		1 3.8 M 18 ZeroCERT

9625 2023-08-09 09:35 hanacard.chm  

d74088ca99c5f2834e945e2330729d4c


Generic Malware Antivirus AntiDebug AntiVM CHM Format PowerShell BMP Format VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10 6 9.0 22 ZeroCERT

9626 2023-08-09 09:29 payment.exe  

4f11205da3e4d05588bcb5a6e518c1df


UPX Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.6 10 ZeroCERT

9627 2023-08-09 09:29 000000000000000%23%23%23%23%23...  

b5851205722f0379cef7fa7f56e9c2c2


Formbook MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS crashed 		4 7 2 5.6 M 30 ZeroCERT

9628 2023-08-09 09:26 Ahdlcrjjdjdlgf.exe  

053052690586782a411f46ec2bf255fb


Hide_EXE UPX Malicious Library Malicious Packer MZP Format PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		2.4 M 40 ZeroCERT

9629 2023-08-09 09:26 file.exe  

01da8f20a8cd019b4d7e54a5fc46f609


UPX Malicious Library OS Processor Check PE File PE32 unpack itself Remote Code Execution 		1.0 M ZeroCERT

9630 2023-08-09 09:24 BR.exe  

608638750dcc078dbd10555303bcce9f


Themida Packer UPX Anti_VM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		1 10.6 M 28 ZeroCERT

keyword