popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9796 2023-10-07 14:57 asca1ex123111.exe  

afeaa39b474fbc97ab20f75b90b340c1


Malicious Library PE File PE32 VirusTotal Malware 		1.6 M 39 ZeroCERT

9797 2023-10-07 14:54 toolspub2.exe  

dde202b7adaadf9c8d422216dc3ebec7


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Code Injection Checks debugger buffers extracted unpack itself Remote Code Execution 		6.6 M 38 ZeroCERT

9798 2023-10-07 14:54 shedremko2.1.exe  

b80d6d5161b4f047ebb9f903822e2cd2


NSIS Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself AppData folder Windows DNS DDNS 		2 1 6.8 M 44 ZeroCERT

9799 2023-10-07 14:52 IOI0OIOoioi0ooooi00IOIOoi0OoI0...  

7284a3e9895de3839eeef2bf59e595ee


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 4 2 4.2 M 35 ZeroCERT

9800 2023-10-07 14:52 ioi0OIOoi0IOIOIoi0OIOIioI0IOio...  

432af76c6e1aaf2f1848808a1ccb3f8b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		2 4 2 4.2 M 33 ZeroCERT

9801 2023-10-07 14:50 UFG.txt.exe  

a413cbf395fa31f26a7f234248248a8e


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed 		2 6.8 56 ZeroCERT

9802 2023-10-07 14:50 build5555.exe  

82eecea4083e39c33733428c2d845b15


Malicious Library UPX Malicious Packer Socket Http API ScreenShot Code injection Internet API AntiDebug AntiVM PE File PE64 OS Processor Check VirusTotal Malware Code Injection buffers extracted Creates executable files DNS 		1 9.8 M 40 ZeroCERT

9803 2023-10-07 14:50 UXO.txt.exe  

00b28f548f14de4f53abd6651bf78b98


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed 		1 5 5 7.4 42 ZeroCERT

9804 2023-10-07 14:48 ZBzdymFh.bat  

44fbd58c401a7786da2e8b6a6291379e


Suspicious_Script_Bin Downloader Malicious Library Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 ZIP For VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder malicious URLs WriteConsoleW crashed 		4.8 M 36 ZeroCERT

9805 2023-10-07 14:48 x.x.x.x.doc  

15c5d883802631d122728961cb66c596


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		2 4 2 4.2 M 34 ZeroCERT

9806 2023-10-07 14:47 UFX.txt.exe  

66d2a9ccb1c8fc3c130ee3941e8c97dd


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName Software crashed 		4.4 50 ZeroCERT

9807 2023-10-07 14:45 DgKW9Ycr.bat  

17787170abd9adf8dcdfcfefdeea0194


Suspicious_Script_Bin Downloader Malicious Library Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P persistence AntiDebug AntiVM PE File PE32 ZIP For VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder malicious URLs WriteConsoleW human activity check crashed 		5.0 M 27 ZeroCERT

9808 2023-10-06 19:15 zip.7z  

9de1f996f53b99da8ad9bcb3f8e3f120


PrivateLoader Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Dridex Malware Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows Discord RisePro Trojan DNS Downloader 		50 88 44 20 7.0 M ZeroCERT

9809 2023-10-06 18:40 Cerber.exe  

8b3d0bc69064a0155a205a4202417330


Malicious Library UPX Admin Tool (Sysinternals etc ...) PE File PE32 Malware download VirusTotal Malware MachineGuid Check memory buffers extracted WMI Creates shortcut ICMP traffic unpack itself Windows utilities AntiVM_Disk WriteConsoleW Firewall state off VM Disk Size Check Ransomware Windows ComputerName Remote Code Execution DNS 		1088 1 7.8 57 guest

9810 2023-10-06 18:23 zinda.exe  

3141032e3b1e4f3ee0d0a1fe68ccc6e8


Emotet Gen1 Malicious Library UPX Confuser .NET AntiDebug AntiVM PE File PE32 .NET EXE DLL MZP Format PE64 OS Processor Check CHM Format DllRegisterServer dll VirusTotal Cryptocurrency Miner Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder WriteConsoleW Tofsee Windows ComputerName DNS crashed CoinMiner 		7 6 11.2 M 45 ZeroCERT

keyword