popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9826 2023-10-06 13:28 d9e1c3_0ec2df3125b34e10ad269f8...  

5e63744a4fad5be640aa0a7a2e444a3d


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.4 3 ZeroCERT

9827 2023-10-06 13:28 castororiginbase64.txt.exe  

e94f7fd09efeb9e90655b64a6e4fced7


AgentTesla Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Browser Email ComputerName crashed 		3.8 58 ZeroCERT

9828 2023-10-06 13:28 2022 1040 (Cornelius Morgan G)...  

c7daf9fd5c8718275c25494e3dba8982


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 5.2 1 ZeroCERT

9829 2023-10-06 10:22 mtxrI8N.exe  

ecdf7acb35e4268bcafb03b8af12f659


UPX .NET framework(MSIL) PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key 		3.6 M 35 ZeroCERT

9830 2023-10-06 10:21 skxeYqr.exe  

20bb118569b859e64feaaf30227e04b8


UPX .NET framework(MSIL) Socket DNS persistence AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		9.6 M 58 ZeroCERT

9831 2023-10-06 10:18 updat2.exe  

2353ef140fcfb38add13c74b388b710d


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB 		1.6 M 32 ZeroCERT

9832 2023-10-06 10:16 i0ioi0iooioo0IOI0OIOIOiooioi00...  

9f6c58103198c1158277e4e0a8137006


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Tofsee Exploit crashed 		1 2 1 3.0 M 28 ZeroCERT

9833 2023-10-06 10:14 i0iioi0IOIOi0ioiioi0ioI0IOI0I9...  

b033c79a643e692668723f11af0e9484


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		1 1 5 4.2 M 30 ZeroCERT

9834 2023-10-06 10:14 vc.js  

9c334d578b33e9df286d5973198f7344

Malware download Wshrat NetWireRC VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Windows Houdini ComputerName DNS DDNS Dropper 		2 2 6 1 10.0 M 27 ZeroCERT

9835 2023-10-06 09:36 d9e1c3_0ec2df3125b34e10ad269f8...  

5e63744a4fad5be640aa0a7a2e444a3d


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.4 3 ZeroCERT

9836 2023-10-06 08:03 foto3553.exe  

53ffe4a2e5ff91672c96597ebece2470


RedLine stealer Gen1 Emotet RedLine Infostealer SmokeLoader Amadey Generic Malware UltraVNC Malicious Library UPX Antivirus .NET framework(MSIL) Confuser .NET Malicious Packer Admin Tool (Sysinternals etc ...) ScreenShot PWS AntiDebug AntiVM PE File PE32 Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Email Client Info Stealer Malware powershell Microsoft AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Stealc Stealer Windows Update Exploit Browser Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		34 18 20 1 26.8 M ZeroCERT

9837 2023-10-06 08:03 rus.exe  

fa89b094ca8c9caaa69758e0c0385d5e


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check Malware PDB Code Injection buffers extracted 		7.4 M ZeroCERT

9838 2023-10-06 08:01 mstsc.exe  

65c7d9e822c9f2b8291202128644e825


Malicious Library UPX PE File PE32 OS Processor Check PDB DNS 		1 2.6 M ZeroCERT

9839 2023-10-06 08:00 Wblxhuaksujvhq.exe  

c7fcb915a272045036e5d8e0de23fd5a


Malicious Library UPX PE File PE32 MZP Format RWX flags setting unpack itself Tofsee Interception crashed 		2 1 2.4 M ZeroCERT

9840 2023-10-06 07:59 nano.exe  

501bd8c4a18e386f240b6d77d388cbb3


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check Malware download Malware PDB Code Injection Malicious Traffic buffers extracted unpack itself Stealc Browser DNS 		1 1 2 1 7.6 M ZeroCERT

keyword