popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9856 2023-10-05 17:02 445.jpg  

30000f8e4ee5bce90382de83814fb8c9


Generic Malware Antivirus Malicious Library UPX Malicious Packer Downloader PE File PE32 DLL PE64 OS Processor Check VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security suspicious process AppData folder Windows ComputerName Cryptographic key 		2 8.4 M 55 ZeroCERT

9857 2023-10-05 17:02 222.exe  

2efdda89d5ae8c0512fb0dfab4cff22a


RedLine stealer Malicious Library UPX ScreenShot PWS AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 10.8 M 35 ZeroCERT

9858 2023-10-05 09:23 Wshp.vbs  

8be364f89bc3f098890bf2c1a576d7a6


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 11 ZeroCERT

9859 2023-10-05 09:17 xqnoOIWFbr2N.exe  

19ec1b3fe77ac2bb9b4019ecf20cfc5b


UPX .NET framework(MSIL) Malicious Packer PE File PE32 .NET EXE Malware download NetWireRC VirusTotal Malware IP Check RAT 		1 4 2 2.0 60 ZeroCERT

9860 2023-10-05 08:00 1.exe  

c5999a94094f1b68b36ecdb65e809730


RedLine stealer Malicious Library UPX ScreenShot PWS AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 10.8 M 30 ZeroCERT

9861 2023-10-05 07:57 ufGFFXjWy6vU4y9.exe  

dbf80d2ee0c7e4a7903479e3dadeac3d


PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself ComputerName DNS crashed 		1 3.2 M 43 ZeroCERT

9862 2023-10-05 07:56 server1.exe  

4d8037262c4cfb2fee106c9ae7d36428


LokiBot task schedule UPX ScreenShot PWS DNS KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Malware download NetWireRC VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself WriteConsoleW IP Check RAT ComputerName DNS DDNS 		1 6 4 10.8 M 37 ZeroCERT

9863 2023-10-05 07:54 FPyuSqdES06O8vS.exe  

c3fdabfa7e016aa9b2cacbb5fc9860a8


Generic Malware UPX Malicious Packer Malicious Library .NET framework(MSIL) PE File PE32 .NET EXE JPEG Format OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces IP Check installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 4 3 12.6 M 53 ZeroCERT

9864 2023-10-05 07:53 HTML.exe  

0c86e968796f80b0e5c091b3270ce88b


Admin Tool (Sysinternals etc ...) .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 14.4 M 35 ZeroCERT

9865 2023-10-05 07:51 KqxxD43gE6ehqZb.exe  

d3fc0eb99a8edffaf0a4c9a66ed91777


Generic Malware Malicious Library UPX PE File PE32 .NET EXE OS Name Check OS Memory Check OS Processor Check JPEG Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla suspicious privilege Malicious Traffic Checks debugger unpack itself Check virtual network interfaces IP Check installed browsers check Windows Browser Email ComputerName DNS DDNS Software crashed keylogger 		2 4 3 10.4 M 56 ZeroCERT

9866 2023-10-05 07:51 file.exe  

9f528babec87d802acab810f56b9e534


RedLine stealer Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 11.0 M 47 ZeroCERT

9867 2023-10-05 07:51 rjFcwBLmZM9M3y7.exe  

5d4392b56aa4ebac400bbe86fe5d0767


Gen1 Generic Malware Malicious Library UPX Malicious Packer Downloader .NET framework(MSIL) PE File PE32 .NET EXE icon DLL OS Processor Check BMP Format Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion IP Check VM Disk Size Check Ransomware Browser ComputerName 		2 4 3 9.4 M 41 ZeroCERT

9868 2023-10-05 07:49 50_2023-10-04_13-27.exe  

1a341a36cd0d3e3ab04a1898194fba3a


Malicious Library UPX PE File PE32 OS Processor Check PDB Remote Code Execution 		0.8 M ZeroCERT

9869 2023-10-05 07:48 FocFoaRhEf4vkFl.exe  

ccec9f6516e38c852b1df13c836e5430


UPX .NET framework(MSIL) AntiDebug AntiVM PE File PE32 .NET EXE PNG Format MSOffice File JPEG Format VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Check virtual network interfaces Tofsee Windows Exploit Browser ComputerName DNS crashed 		1 6 2 9.4 M 41 ZeroCERT

9870 2023-10-05 07:47 XZJ7pcVdxODBwEr.exe  

43793501051282b49746c790640bcf31


Emotet Generic Malware Malicious Library UPX Downloader Malicious Packer Anti_VM PE File PE32 .NET EXE JPEG Format OS Name Check OS Memory Check OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk IP Check VM Disk Size Check installed browsers check Tofsee Windows Browser Email ComputerName DNS DDNS Software crashed keylogger 		2 5 3 13.6 M 43 ZeroCERT

keyword