popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9706 2023-10-10 18:33 usrgroup.dat.dll  

420a13202d271babc32bf8259cdaddf3


Malicious Library PE File DLL PE64 VirusTotal Malware Checks debugger unpack itself 		1.6 37 ZeroCERT

9707 2023-10-10 18:32 XUYSoft.download.exe  

a3333cc24e8144d6a3bb5ef08cbf9b82


Gen1 Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) .NET framework(MSIL) PE File PE64 ftp DllRegisterServer dll OS Processor Check VirusTotal Malware PDB crashed 		1.0 12 ZeroCERT

9708 2023-10-10 18:25 putty.exe  

1d5ad4a60ec9be32c11ad99f234bfe8f


Malicious Library UPX PE File PE64 OS Processor Check FTP Client Info Stealer VirusTotal Malware Check memory Checks debugger unpack itself Software 		3.0 38 ZeroCERT

9709 2023-10-10 17:02 w-12.exe  

0cb677593212bc9f636c778bd6333b3a


PE File PE32 VirusTotal Malware WriteConsoleW crashed 		2.2 M 22 ZeroCERT

9710 2023-10-10 17:02 windows.exe  

36065d0183df9a022d1cfb4eac70ee71


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 3.8 M ZeroCERT

9711 2023-10-10 17:01 windows.exe  

0652f7b122116eec5cfe7cd5bae5a7bd


Malicious Library UPX Malicious Packer Antivirus .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 60 ZeroCERT

9712 2023-10-10 17:00 i-5.8-6.Sakura  

934037ef82e243dea200d0567604bd2e


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.6 M 40 ZeroCERT

9713 2023-10-10 17:00 Prowf.exe  

3cef8b4a9c9507c112ca5449a03b03e9


PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		2 1 2.8 M 48 ZeroCERT

9714 2023-10-10 14:06 setup294.exe  

cdab7ff04a8249fd9709106297453f03


Malicious Library UPX PE File PE32 DLL OS Processor Check Check memory Checks debugger Creates executable files unpack itself AppData folder 		2.6 M ZeroCERT

9715 2023-10-10 14:04 setup294.exe  

3c1be0e1c425fd4f3204a6f914021210


Malicious Library UPX PE File PE32 DLL OS Processor Check Check memory Checks debugger Creates executable files unpack itself AppData folder WriteConsoleW 		2.8 ZeroCERT

9716 2023-10-10 10:56 Contract-2.msi  

8e68a2869daf1ba9eaebf31d2d87973e


DarkGate Malicious Library MSOffice File CAB OS Processor Check VirusTotal Malware Buffer PE suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check Windows ComputerName 		9 4 3 4 4.8 M 1 ZeroCERT

9717 2023-10-10 10:48 zip.7z  

180d73f995d228c51498c4bfaf674d57


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		22 24 18 7 6.0 M 7 ZeroCERT

9718 2023-10-10 10:42 zip.7z  

854c628dca46bee73c0d90ce447d626e


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		21 24 18 7 5.6 M ZeroCERT

9719 2023-10-10 10:37 xxx.jpg.ps1  

afaec0cb0efc79d3c2effd5ea7c43cf9


Generic Malware Antivirus VirusTotal Malware Check memory Creates executable files unpack itself WriteConsoleW ComputerName 		2.0 M 13 ZeroCERT

9720 2023-10-10 10:36 Informazioni.txt.url  

0e20d831a104276c6b374d9c01cc9bde


AntiDebug AntiVM URL Format MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 5 ZeroCERT

keyword