popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9976 2023-10-02 08:47 1E.pdf.lnk  

9d539da1e51f4527f812b0a79c7bd6bc


Generic Malware AntiDebug AntiVM Lnk Format GIF Format Malware Code Injection Malicious Traffic Check memory Creates shortcut suspicious process WriteConsoleW DNS crashed 		1 1 2 3.8 ZeroCERT

9977 2023-10-02 08:44 Rules.doc  

316e3ee9229e0b06a6a7b9bf890bdbda


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB crashed 		2.0 M 55 ZeroCERT

9978 2023-10-02 08:43 SHV.pdf.lnk  

6474f6c0ce3a9c295c45a612d40d4d7e


Generic Malware AntiDebug AntiVM Lnk Format GIF Format VirusTotal Malware Code Injection Malicious Traffic Check memory Creates shortcut unpack itself suspicious process WriteConsoleW DNS crashed 		1 1 2 5.0 25 ZeroCERT

9979 2023-10-02 08:42 ed1.exe  

d1906fd8d9e6b18ee8a134e81982e23a


RedLine stealer Generic Malware UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 2 10 14.0 M 30 ZeroCERT

9980 2023-10-02 08:41 8742db7e5aaa5b29b16efd1396c7a2...  

8742db7e5aaa5b29b16efd1396c7a273


PE File PE32 .NET EXE VirusTotal Malware Tofsee 		1 3 1 1.6 56 ZeroCERT

9981 2023-10-02 08:41 afkjo.txt.exe  

fface24ac296a898cca3f46bc0abcd58


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check Check memory unpack itself Remote Code Execution crashed 		1.4 ZeroCERT

9982 2023-10-02 08:39 Wemhwwlidxivdd.scr  

af833c8bae12203ce03858314816a871


Malicious Library UPX PE File PE32 MZP Format VirusTotal Malware RWX flags setting unpack itself Tofsee Interception crashed 		2 1 2.8 23 ZeroCERT

9983 2023-10-02 08:38 afkjo.vbs  

ace68031816b590f740f60db507faa88


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.4 22 ZeroCERT

9984 2023-10-02 08:38 goatedinvagina.vbs  

312944bf58416a6acb26529b860332e9


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.6 11 ZeroCERT

9985 2023-10-02 08:37 lu47821.txt.exe  

ed55b32151792a117b9c9bfe439734cc


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 6.4 55 ZeroCERT

9986 2023-10-02 08:33 ngtow.vbs  

a09d3cecc62af216cb921bbfc0ff19e3


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 9.0 2 ZeroCERT

9987 2023-10-02 08:33 ndert.vbs  

257a418a423d9f27a2e40b896651bd3a


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 6 ZeroCERT

9988 2023-10-02 08:32 LUG.vbs  

f82f969d6d77eb0a86acc15645eb66c8


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.8 20 ZeroCERT

9989 2023-10-01 17:21 smito.vbs  

59680b2a16554cb985039efea24eda81


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 3 1 8.4 5 ZeroCERT

9990 2023-10-01 17:21 nix.txt.exe  

5d5a750c6c99cae5b8ca7d277b1dac50


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 6.4 57 ZeroCERT

keyword