popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9646 2023-10-11 18:36 typhon.exe  

3fad6c3e0604ee091f2b2a61a91e2b4d


Malicious Packer .NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware Telegram Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee ComputerName DNS 		2 6 7 4.4 M 20 ZeroCERT

9647 2023-10-11 18:36 build.exe  

71535cb29a844c48321528d0fdfdb6d9


PE File PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency Check memory unpack itself Auto service Check virtual network interfaces ComputerName Firmware DNS 		1 2 4.8 M 35 ZeroCERT

9648 2023-10-11 18:12 bQ5J.exe  

82f98bb613a30f61ceb9ca7686f97847


PE File PE32 .NET EXE VirusTotal Malware Tofsee 		1 3 1 1.6 51 ZeroCERT

9649 2023-10-11 18:12 BYxYP9c1.ps1  

ee4cabf85331d01dcc5fa75be75b5598


Generic Malware Antivirus .NET DLL PE File DLL PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key crashed 		7.6 27 ZeroCERT

9650 2023-10-11 18:11 Ooseha.exe  

cb75f58a8d5e9ab38bf5e6afdb09d7c8


Formbook UPX .NET framework(MSIL) ScreenShot PWS AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		16 19 12 14 11.4 M 43 ZeroCERT

9651 2023-10-11 18:11 KjAvj6Vu.ps1  

ea8465175894190a7542d07bcea179b8


Generic Malware Antivirus .NET DLL PE File DLL PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key crashed 		7.0 27 ZeroCERT

9652 2023-10-11 18:10 Olfumi.exe  

eb05d45ff60a5fd5ea43ed782e967600


.NET framework(MSIL) PE File PE32 .NET EXE VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Windows ComputerName DNS Cryptographic key 		1 1 4.4 M 45 ZeroCERT

9653 2023-10-11 18:10 0iuoioooUIOIOiiiu0u0uioiui0iui...  

3289a3401f78873c39e10465d77be4df


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		18 21 15 14 4.6 M 32 ZeroCERT

9654 2023-10-11 18:09 Nmyp2y0F.ps1  

2eeab273293d358d548a3aeb7f8b7033


Generic Malware Antivirus .NET DLL PE File DLL PE32 VirusTotal Malware Checks debugger Creates executable files unpack itself Windows utilities AppData folder Windows Cryptographic key crashed 		3.6 27 ZeroCERT

9655 2023-10-11 18:08 Setup.exe  

aac23ff6c2cc93769600e060ab7cfca9


Generic Malware Malicious Library UPX Malicious Packer .NET framework(MSIL) Antivirus Anti_VM PE File PE32 OS Processor Check ZIP Format BMP Format CHM Format DLL .NET EXE PE64 MSOffice File JPEG Format Word 2007 file format(docx) VirusTotal Email Client Info Stealer Cryptocurrency Miner Malware Cryptocurrency Telegram PDB Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Auto service Check virtual network interfaces AppData folder IP Check Tofsee Ransomware Windows Email ComputerName Firmware DNS 		10 9 15 12.0 M 29 ZeroCERT

9656 2023-10-11 18:08 sihost.exe  

551c449271f2c0a9d4dea541a009bc80


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Browser Email ComputerName Software crashed 		9.6 M 43 ZeroCERT

9657 2023-10-11 18:06 audiodgse.exe  

4efcfa2947ffd17dc6eec46cce944ca8


LokiBot PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Browser Email ComputerName Software crashed 		8.6 M ZeroCERT

9658 2023-10-11 17:01 zip_pass1234.7z  

902a9838f4e815e995103aa9d5ec3108


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		17 25 14 8 5.6 M ZeroCERT

9659 2023-10-11 15:48 OI0ioioOI0I0I0oioioi0oiOI0oi00...  

2a932891e36958c4509cf7b54d3cf43b


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic ICMP traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		18 20 14 14 5.4 M 33 ZeroCERT

9660 2023-10-11 15:46 zip1_09.7z  

cc7af56986cf3d93d33a92bd4a2962f1


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Dridex Malware Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Lumma Stealer Windows RisePro DNS 		37 77 37 17 8.0 M ZeroCERT

keyword