popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10036 2023-07-25 18:49 ssltdzx.exe  

dd2d413bc603305444c816d1cf84e2b6


AgentTesla UPX .NET framework(MSIL) KeyLogger AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 11.8 M 51 ZeroCERT

10037 2023-07-25 18:49 lawzx.doc  

31332915ea2a23d649e1ccb1c15c6a1c


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash Tofsee Windows Exploit DNS crashed 		1 3 7 4.6 M 29 ZeroCERT

10038 2023-07-25 18:49 crypt_se.exe  

bca2197eefdb2e06f4b9cf01f1d3e291


UPX Malicious Library PWS SMTP AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications WriteConsoleW installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 1 12.0 M 27 ZeroCERT

10039 2023-07-25 17:24 abyx.vbs  

531e8d4ce64013bb6cf4afa0eb38eefe


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 M 8 ZeroCERT

10040 2023-07-25 17:22 1.exe  

df53bb96de4749ce780bf8b939dc2cd5


RedLine stealer UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces WriteConsoleW installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 4 13.4 M 41 r0d

10041 2023-07-25 16:55 clip64.dll  

358ddcec1819198ecad04ef86899feaa


Amadey UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 59 r0d

10042 2023-07-25 16:52 clip64.dll  

2392b231cf4a80739b5cb09bf808127d


Amadey UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 60 r0d

10043 2023-07-25 10:38 HHYGASDBBBX.hta  

2aa4741c22f4f7e9f7fb2318e974649c


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		2 9.2 17 ZeroCERT

10044 2023-07-25 10:37 shdeulerinstall.lnk  

fcfd7e25e415f1d9ee598ab41ca31840


Generic Malware Antivirus AntiDebug AntiVM GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.8 11 ZeroCERT

10045 2023-07-25 09:33 clip64.dll  

358ddcec1819198ecad04ef86899feaa


UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 52 ZeroCERT

10046 2023-07-25 09:12 Untitled2.bmp.ps1  

b503ffd3552cd5a97874afe409f3b469


Generic Malware Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote WriteConsoleW Windows ComputerName Cryptographic key 		16 15 10.6 M 6 ZeroCERT

10047 2023-07-25 09:05 clip64.dll  

2392b231cf4a80739b5cb09bf808127d


UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 55 ZeroCERT

10048 2023-07-25 08:34 pls.exe  

3b32db2fff556c03e79cf112664238fd


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL suspicious privilege Check memory Creates executable files unpack itself AppData folder suspicious TLD DNS 		19 19 2 3.8 M ZeroCERT

10049 2023-07-25 07:59 wininit.exe  

682fbd7115e44f2d2cdac467072a0e24


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		11 11 10 8.8 M ZeroCERT

10050 2023-07-25 07:55 IBLIBLIBLIBLIBLUBLUBUBIBLIBLIB...  

6042e77faf4b55ffab673816405d31b6


MS_RTF_Obfuscation_Objects RTF File doc buffers extracted RWX flags setting exploit crash Exploit crashed 		2.2 M ZeroCERT

keyword