popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
976 2024-08-17 23:17 Uninstall.xml  

364f86f97324ea82fe0d142cd01cf6dd


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

977 2024-08-17 23:16 Uninstall.xml  

364f86f97324ea82fe0d142cd01cf6dd


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

978 2024-08-17 23:16 cleanospp.exe  

d3467cb7b83b654c2d05407dc7ba2360


Generic Malware Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE64 PDB Check memory unpack itself 		1.2 guest

979 2024-08-17 23:16 Configure.xml  

a163ce14405a6eed5ec4bfbef078e5b6


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 guest

980 2024-08-17 23:16 msvcr100.dll  

df3ca8d16bded6a54977b30e66864d33


Gen1 Generic Malware Malicious Library UPX PE File DLL PE64 OS Processor Check PDB 		0.4 guest

981 2024-08-17 23:14 Configure.xml  

a163ce14405a6eed5ec4bfbef078e5b6


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

982 2024-08-17 23:13 cleanospp.exe  

d3467cb7b83b654c2d05407dc7ba2360


Generic Malware Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE64 PDB Check memory unpack itself 		1.2 guest

983 2024-08-17 23:13 msvcr100.dll  

df3ca8d16bded6a54977b30e66864d33


Gen1 Generic Malware Malicious Library UPX PE File DLL PE64 OS Processor Check PDB 		0.4 guest

984 2024-08-17 23:10 cleanospp.exe  

98821a7a5737d656633d10a3afb724bd


Generic Malware Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 PDB Check memory unpack itself WriteConsoleW 		1.4 guest

985 2024-08-17 23:10 msvcr100.dll  

bf38660a9125935658cfa3e53fdc7d65


Gen1 Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check PDB 		0.6 guest

986 2024-08-17 23:10 msvcr100.dll  

df3ca8d16bded6a54977b30e66864d33


Gen1 Generic Malware Malicious Library UPX PE File DLL PE64 OS Processor Check PDB 		0.4 guest

987 2024-08-17 23:09 cleanospp.exe  

d3467cb7b83b654c2d05407dc7ba2360


Generic Malware Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM PE File PE64 PDB unpack itself 		1.0 guest

988 2024-08-17 23:00 DNSBench.exe  

04177f89fa23b9d6fec146d9be737566


UPX PE File PE32 Malware download VirusTotal Malware Checks debugger unpack itself Check virtual network interfaces Tofsee GameoverP2P Zeus DNS crashed 		2 590 2 3.6 4 guest

989 2024-08-17 22:39 SVC.exe  

e97f5c3efb2cc80e001129383d5a0132


Malicious Library PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger ICMP traffic unpack itself Check virtual network interfaces Windows ComputerName Cryptographic key 		3.6 M 13 ZeroCERT

990 2024-08-17 22:37 Identifications.exe  

edcf274c5fb6582593f81ecc977264e9


Emotet Malicious Library Admin Tool (Sysinternals etc ...) UPX PE File PE64 MZP Format OS Processor Check VirusTotal Malware unpack itself 		2.0 M 31 ZeroCERT

keyword