popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9811 2023-10-06 17:53 putty.exe  

9872c3c580e8bd1a22cd4698e73e3f9a


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Remote Code Execution 		1.6 M 30 ZeroCERT

9812 2023-10-06 17:51 get4.exe  

ff7517e244f6545e7936becd68aa0578


PE File PE64 VirusTotal Malware Check memory 		1.6 M 11 ZeroCERT

9813 2023-10-06 17:49 Tugksta.exe  

1f4795e3a6a434601ec37a38ffc99ff5


Formbook UPX .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		17 20 12 14 11.2 M 35 ZeroCERT

9814 2023-10-06 17:49 HTMLc.exe  

ac1e4067e159504a3bfc2c12b1221d10


LokiBot PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.6 M 42 ZeroCERT

9815 2023-10-06 17:47 fotha0925877.exe  

65ef2eef1ccf3146b44010406a235cb7


Gen1 Emotet Generic Malware Malicious Library UPX Malicious Packer PE File PE32 CAB OS Processor Check DLL PE64 Lnk Format GIF Format VirusTotal Malware AutoRuns PDB Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization VM Disk Size Check Windows ComputerName Remote Code Execution crashed 		3 8.8 M 24 ZeroCERT

9816 2023-10-06 17:44 Akh.exe  

ea7e83d83566d5aeceef44caf31cc59d


PE File PE64 VirusTotal Malware Check memory 		1.6 M 11 ZeroCERT

9817 2023-10-06 14:45 doser.exe  

4b30467bb8a0c1f50d0705febb02c35d


Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check VirusTotal Malware unpack itself crashed 		1.8 18 ZeroCERT

9818 2023-10-06 14:09 okilo.txt.exe  

f2d429cdb651892f83759f28ae6b939c


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName Software crashed 		3.2 ZeroCERT

9819 2023-10-06 13:56 ReklamX.ps1  

4529da5fd57f762d9286c19c609f015c


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself Windows Cryptographic key 		1.4 15 ZeroCERT

9820 2023-10-06 13:55 ReklamX.ps1  

05931e59a873435df1111513cc67eb0c


Generic Malware Antivirus Check memory unpack itself Windows Cryptographic key 		0.8 ZeroCERT

9821 2023-10-06 13:55 vc.js  

9c334d578b33e9df286d5973198f7344

Malware download Wshrat NetWireRC VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Windows Houdini ComputerName DNS DDNS Dropper 		1 2 4 1 10.0 M 27 ZeroCERT

9822 2023-10-06 13:54 UGFH.txt.exe  

3c3580dfbc1f06636fe5696879cbdd85


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 6.4 53 ZeroCERT

9823 2023-10-06 13:40 okl.vbs  

41ae735bd929dfe448cc75d19fed57a2


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 7 ZeroCERT

9824 2023-10-06 13:39 powerwinner.ps1  

d56818ec2778b8a3b3b13e2c7e88dc63


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 4.8 M 1 ZeroCERT

9825 2023-10-06 13:39 HTMLcode.vbs  

49bad06e91f748e94a260cbfdb0fffed


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 7 ZeroCERT

keyword