popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9781 2023-08-04 09:07 810000000%23%23%23%23%23%23%23...  

925753e9dd326a0cedae8e21f0c23f14


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		1 1 5 3.6 M ZeroCERT

9782 2023-08-04 09:07 ohoyeczx.exe  

f3ba23553ad0411c937414c4de068c5b


Gen1 email stealer Downloader UPX .NET framework(MSIL) Malicious Packer Malicious Library Escalate priviledges PWS DNS Code injection persistence KeyLogger AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 DLL Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 14.4 M 15 ZeroCERT

9783 2023-08-04 09:06 012004040003030030%23%23%23%23...  

9196f5d37dd1750c7ab2ea6becaddbb9


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		6 8 5 5.6 M 16 ZeroCERT

9784 2023-08-04 09:05 update_SC.bat  

9d383592178e4a3170a1e8e4772749ba


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger Anti_VM AntiDebug AntiVM VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.4 3 ZeroCERT

9785 2023-08-04 09:04 ChromeSetup.exe  

1ef8e255010d20c6343df3670cce06e6


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 13.4 M 29 ZeroCERT

9786 2023-08-04 09:03 a.bat  

e9da2dbc0577f419fcafa37a6b5a3faa


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger Anti_VM AntiDebug AntiVM VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.4 5 ZeroCERT

9787 2023-08-04 09:02 IB_iso.exe  

d27e13ce5271639c09cf59b9f6eaee10


NSIS UPX Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder suspicious TLD DNS 		2 7 2 5.8 M 41 ZeroCERT

9788 2023-08-04 09:02 ChromeSetup.exe  

4bf3697cc2dc73c5a4f5e9d66444d87d


NSIS Generic Malware UPX Malicious Library PE File PE32 DLL VirusTotal Malware AppData folder 		1.4 M 21 ZeroCERT

9789 2023-08-04 09:00 000100000200003000004000050000...  

4d3e4367bfd1e8e2adb2d90cd5f07399


MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		2 2 12 4.8 M 29 ZeroCERT

9790 2023-08-04 08:59 ChromeSetups.exe  

1892d8096709dd77655414e73ad6d25f


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 44 ZeroCERT

9791 2023-08-04 08:58 IBS_Cortana.exe  

9cd26ed910554ae5b86e53ef892e7117


UPX Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.4 M 30 ZeroCERT

9792 2023-08-04 08:57 utilsx.exe  

413157ad1210bff496058fb2d23269c3


UPX Malicious Library PE64 PE File VirusTotal Malware Creates executable files Windows utilities WriteConsoleW Windows 		3.0 M 29 ZeroCERT

9793 2023-08-03 16:52 mount_U (1).cmd  

589178271568a61598725543f1d56d47


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger AntiDebug AntiVM Check memory Windows utilities Check virtual network interfaces WriteConsoleW Windows 		1 2 3.0 guest

9794 2023-08-03 14:07 smss.exe  

6308cc22d136d3cc309205ca43233bec


Malicious Library PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.6 M 43 ZeroCERT

9795 2023-08-03 13:57 pablozx.doc  

1ed1a3c75c699312d7ecffaf02f7cfb8


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		1 2 5 4.6 M 32 ZeroCERT

keyword