popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9931 2023-07-28 14:15 vbc.exe  

c12fbddc2c7ae2eb6b4431bb52646d4d


UPX Malicious Library PE File PE32 DLL .NET DLL PE64 GIF Format VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself suspicious process AppData folder crashed 		1 4.0 M 31 ZeroCERT

9932 2023-07-28 14:13 SWISSSWISSSWISSSWISSSIWSSSIWIS...  

b0361a874f097e9000ffc073ad1cccb5


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 2 4.6 M 31 ZeroCERT

9933 2023-07-28 14:13 wininit.exe  

2cee30219b059ac64f0b4f363edcf0f5


Formbook .NET framework(MSIL) AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		12 11 10 9.2 M 36 ZeroCERT

9934 2023-07-28 14:12 system.vbs  

bb9912b2bbc3c22d1d4a261020afa0d3


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 7.6 4 ZeroCERT

9935 2023-07-28 14:10 CHMSDFHIDSFIHSIDFHIH%23%23%23%...  

937cc2aa6de4c6b3475b2106c7549bbf


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 1 4.6 M 31 ZeroCERT

9936 2023-07-28 14:09 clip64.dll  

7480f4019e4d41ea6508ce29adab0d2c


Amadey UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 58 ZeroCERT

9937 2023-07-28 14:07 777888_2023-07-27_14-57.exe  

d106422018f67d798c142062e70a5810


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 49 ZeroCERT

9938 2023-07-28 14:07 iwAmDsFecs.exe  

8b1de7ff7c5f0d495c4c66c9ae3e9613


Malicious Library KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Cryptographic key crashed 		7.0 M 24 ZeroCERT

9939 2023-07-28 10:40 yzhuQFZOKoMax.exe  

71c0a5043a21ae67b76f291325de7506


Malicious Library PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 3.0 M 46 ZeroCERT

9940 2023-07-28 10:39 system.vbs  

d64e719c50dcf19c9d911e8eb353a37e


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 8.0 M 20 ZeroCERT

9941 2023-07-28 10:39 Aloic.bmp  

7c75d25fcb55e27a84dba451969ba2e3


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Google Chrome User Data Downloader .NET framework(MSIL) Create Service Socket Escalate priviledges PWS Sniff Audio DNS Internet API KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Remcos VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS keylogger 		1 3 1 10.8 M 39 ZeroCERT

9942 2023-07-28 10:36 FeeeeeeeeeeeeeeFeeeeeeeeeeeeee...  

4f6911ba2cfb8db577523bafa3d70a78


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 1 4.6 M 35 ZeroCERT

9943 2023-07-28 10:35 123.exe  

0e6d97f2465f51dadc93192c8e162f11


RedLine stealer UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 11.8 M 37 ZeroCERT

9944 2023-07-28 10:33 jesus.exe  

7b6580f08a43949b795aa68c0e5e45cc


UPX .NET framework(MSIL) Malicious Library Malicious Packer Antivirus OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 63 ZeroCERT

9945 2023-07-28 10:31 wininit.exe  

52911cc84b7dae18ea666f124700b68e


UPX Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.2 M 23 ZeroCERT

keyword