popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10036 2023-09-30 13:05 asca1ex1234.exe  

ab42dd45f0015269d23c14792397617f


Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware 		1.6 M 38 ZeroCERT

10037 2023-09-30 13:05 UMM2.exe  

16e1b0fb578bc6d4eb28a5389a8436dd


PE File PE32 .NET EXE VirusTotal Malware Buffer PE PDB Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key 		1 4.0 M 19 ZeroCERT

10038 2023-09-30 13:04 Amadey.exe  

aebaf57299cd368f842cfa98f3b1658c


Amadey Browser Login Data Stealer Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 OS Processor Check DLL JPEG Format PE64 Malware download Amadey VirusTotal Malware AutoRuns PDB Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Interception Windows Browser ComputerName DNS crashed 		4 1 6 10.0 M 55 ZeroCERT

10039 2023-09-30 13:04 toolspub1.exe  

0da78f6ac7f81956c6b3b73aa43ef60d


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware PDB 		2.6 M 33 ZeroCERT

10040 2023-09-30 13:03 foto1221.exe  

99e05ed844344417fbf1594c67054ebe


RedLine stealer Gen1 Emotet RedLine Infostealer Browser Login Data Stealer Malicious Library UPX .NET framework(MSIL) Confuser .NET AntiDebug AntiVM PE File PE32 CAB .NET EXE OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealc Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 2 7 1 17.2 M 51 ZeroCERT

10041 2023-09-30 13:01 WinDhcp.exe  

d381d9db9cbd1b60afdfb4f05e52a775


PE File PE64 VirusTotal Malware 		1.2 M 21 ZeroCERT

10042 2023-09-30 12:59 herom.exe  

38682480c0a22cc8e025f23d78bab140


Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder WriteConsoleW 		2.8 M 16 ZeroCERT

10043 2023-09-30 12:59 RBY1.exe  

d6a782cd2e4b92e06bbc8204013f3d68


PE File PE32 .NET EXE VirusTotal Malware Buffer PE PDB Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		4.0 36 ZeroCERT

10044 2023-09-30 12:58 Services.exe  

b9a096baebdf8e44368e9724da8e56dd


Malicious Library UPX PE File PE32 PE64 Malware download VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW IP Check PrivateLoader Tofsee Windows ComputerName DNS crashed 		8 20 8 2 10.8 M 37 ZeroCERT

10045 2023-09-30 12:57 birza.exe  

53df0c8b56120e03e1657e366720ecd9


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET PE File PE32 .NET EXE OS Processor Check Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 6.2 M 56 ZeroCERT

10046 2023-09-30 12:57 kus.exe  

acf39b9c0b1f3c9addd5dd50a8773a28


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Code Injection buffers extracted crashed 		8.0 M 38 ZeroCERT

10047 2023-09-30 12:54 clip64.dll  

e913b0d252d36f7c9b71268df4f634fb


Amadey Malicious Library UPX Admin Tool (Sysinternals etc ...) PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 55 ZeroCERT

10048 2023-09-28 08:41 westcompetitiveresspro.exe  

41ca6ed3ff003e205d7dae915c20eb59


Gen1 Emotet Malicious Library UPX PE File PE64 CAB VirusTotal Malware AutoRuns PDB Creates executable files Windows Remote Code Execution 		3.0 12 ZeroCERT

10049 2023-09-28 08:40 ly4893.txt.exe  

ed55b32151792a117b9c9bfe439734cc


Malicious Library UPX Malicious Packer PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Software crashed keylogger 		2 4 6.4 55 ZeroCERT

10050 2023-09-28 08:38 bestunderstandingresspro.exe  

c64258c1d7fef95b76f9aca64d707ac7


Gen1 Emotet Malicious Library UPX PE File PE64 CAB VirusTotal Malware AutoRuns PDB Creates executable files Windows Remote Code Execution 		3.0 14 ZeroCERT

keyword