popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9721 2024-05-24 07:52 gHIvTf22qvmZjum.exe  

8b7b19184d4eaa008d1cbba2bfece478


AgentTesla Malicious Library PWS KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Browser Email ComputerName crashed 		1 2 1 11.4 56 ZeroCERT

9722 2024-05-24 07:51 7zipsilentinstaller.exe  

09fc747681c810bf422de1d30713800c


Malicious Library Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		2 1 1.8 M 6 ZeroCERT

9723 2024-05-24 07:50 ChromeSetup.exe  

fe2f9e211bfaf529c92bc28cb847da46


Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL PE64 DllRegisterServer dll MSOffice File CAB Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces sandbox evasion Tofsee Ransomware Windows Google ComputerName RCE DNS 		4 28 4 7.6 M ZeroCERT

9724 2024-05-24 07:49 xxxz.exe  

fba7a7675a7db49f2e2d06c74912a706


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself crashed 		2.4 58 ZeroCERT

9725 2024-05-24 07:49 csrss.exe  

e5cb8c66cab6a972529a85480b9881bc


Malicious Library Antivirus UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		4.0 M 56 ZeroCERT

9726 2024-05-24 07:47 Client.exe  

7ac0adf482250172280defec7a7054da


Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.6 M 63 ZeroCERT

9727 2024-05-24 07:47 sharonzx.exe  

0b67adeb422396c047e87fa78a9e8e80


Loki LokiBot Generic Malware Malicious Library .NET framework(MSIL) Antivirus Socket PWS DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c powershell PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 16 8 1 16.0 M 40 ZeroCERT

9728 2024-05-24 07:47 Testing.exe  

144f1b1c4b9cdad97d8dd1a3a89e7ea1


Suspicious_Script_Bin Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX Confuser .NET PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Telegram Buffer PE AutoRuns Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder installed browsers check Tofsee Windows Browser DNS 		4 6 7.0 M 60 ZeroCERT

9729 2024-05-24 07:46 vax.exe  

efb0c31543ca816cd9a55cafd730224c


Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Check memory Checks debugger unpack itself 		0.8 M ZeroCERT

9730 2024-05-24 07:42 Bypass3_Pure_Mode.exe  

6e1e63e97c09758e3db18ea31bd95284


Generic Malware Malicious Library Malicious Packer UPX Antivirus Anti_VM PE File .NET EXE PE32 PE64 ftp OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		5.2 M 58 ZeroCERT

9731 2024-05-24 07:41 rooma.exe  

1dcce19e1a6306424d073487af821ff0


Generic Malware Malicious Library PE File PE32 DLL FormBook Browser Info Stealer Malware download VirusTotal Malware buffers extracted Creates executable files unpack itself AppData folder Browser DNS 		19 20 3 6.6 M 60 ZeroCERT

9732 2024-05-24 07:41 SrbijaSetupHokej.exe  

528b9a26fd19839aeba788171c568311


Generic Malware Malicious Library UPX PE File PE32 MZP Format OS Processor Check PE64 VirusTotal Malware Checks debugger unpack itself AppData folder 		2.0 2 ZeroCERT

9733 2024-05-24 07:40 GoogleUpdateTaskMachineQCW.exe  

4e9292f02efc44abd5a2671439283405


PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency DNS CoinMiner 		2 1 2.4 56 ZeroCERT

9734 2024-05-24 07:38 svc.exe  

92c57dd80b764a028749520017d44e76


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself 		2.0 M 61 ZeroCERT

9735 2024-05-23 20:54 1.jpg  

d1a446c5c7563fb7901a33313ddb9d05


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself RCE 		2.4 M 37 ZeroCERT

keyword