popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9676 2023-10-11 11:31 Documenti.url  

605a545fcf4bdb9f72cccce6f96c3b00


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 5 ZeroCERT

9677 2023-10-11 11:30 disruptive.lnk  

70964a6ad358b8e1ed36b1d6ebd3a03b


PDF unpack itself Windows utilities Windows 		1.4 ZeroCERT

9678 2023-10-11 11:29 Azienda.url  

7d41622bb8e2d0cc1e148b9d536c792b


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting unpack itself Windows utilities Tofsee Windows DNS 		1 1 2 4.8 5 ZeroCERT

9679 2023-10-11 11:27 ReklamX.ps1  

89e77fe3f7bc59200ede7741097bd7e4


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself Windows Cryptographic key 		1.2 4 ZeroCERT

9680 2023-10-11 11:27 Report6.msi  

08b7acfc53290cda3cc74fcef70f6e65


DarkGate Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check Windows ComputerName 		5 5 3 3 5.2 M 11 ZeroCERT

9681 2023-10-11 11:18 ebd.zip  

6e1bfdcf1577db9886dd1440808ed4f2


DarkGate ZIP Format Windows 		4 5 3 3 1.4 M guest

9682 2023-10-11 10:58 REQUEST FOR OFFER.exe  

40a0594721777a253cd4481267194ff9


Malicious Library UPX PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		2.8 7 ZeroCERT

9683 2023-10-11 08:07 updat1.exe  

571ea8843de2bd01744f6caba0e202ea


Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware unpack itself crashed 		2.0 M 29 guest

9684 2023-10-11 08:03 sihost.exe  

7ee626b72a7112befb6febbb8f635ede


LokiBot Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		13.0 M 38 ZeroCERT

9685 2023-10-11 08:01 marcolite2.1.exe  

71ea87bcc822a68c4ef492ecbdba37f6


NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		1 5 1 4.4 M 34 ZeroCERT

9686 2023-10-11 07:59 fbinzx.exe  

00b27694025e82652c1976c6745a2de1


Formbook PWS AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 5 1 1 8.4 M 39 ZeroCERT

9687 2023-10-11 07:57 sihost.exe  

1d2e25e64e7c402540fa6ce6871257f4


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		3 4 15.0 M 41 ZeroCERT

9688 2023-10-11 07:57 sihost.exe  

8d91ce7f3a66bcfda11e488cc34c698f


Formbook UPX .NET framework(MSIL) ScreenShot PWS AntiDebug AntiVM PE File PE32 .NET EXE OS Processor C FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		20 24 11 18 11.4 M 40 ZeroCERT

9689 2023-10-11 07:56 updat1.exe  

571ea8843de2bd01744f6caba0e202ea


Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware unpack itself crashed 		2.0 M 29 ZeroCERT

9690 2023-10-11 07:55 ishost.exe  

e8ba8c2f63e7d3e3cbf0dd2a426e4eb5


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		12.0 M 32 ZeroCERT

keyword