Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player
10081	2023-07-23 09:54	safevpn20.11342.2k.exe 6bafba4a43173045136e95abe78666e8 Gen1 Emotet Suspicious_Script_Bin Generic Malware UPX Malicious Library ASPack Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM OS Processor Check PE64 PE File icon DLL ZIP Format BMP Format Browser Info Stealer VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself Windows Browser					3.6		37	ZeroCERT

10082	2023-07-23 09:46	new.exe 8bb15c76e2d55780ced07a1a2c589486 Lazarus Family Themida Packer UPX Malicious Library Http API HTTP ScreenShot Internet API AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare sandbox evasion VMware anti-virtualization installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Firmware crashed	4 Keyword trend analysis	2	1	3	17.4	M	24	ZeroCERT

10083	2023-07-23 09:45	System_root.vbs 994ed6b1d35267618f3d7f73833664d7 Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key	1 Keyword trend analysis	2	1		7.6	M	3	ZeroCERT

10084	2023-07-23 09:43	bilkad.exe c4fe973e479a2af02dce5b9888e97917 PE64 PE File VirusTotal Malware crashed					2.2	M	42	ZeroCERT

10085	2023-07-23 09:43	file.exe fff2f00fa9387530fb724fb44855b4f3 UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution					2.0	M	31	ZeroCERT

10086	2023-07-23 08:11	ROOTROOTROOOTROOOTROTROOTROT%2... 1e2437d520b6cf1964cd8146261ab344 MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed	1 Keyword trend analysis	3	2		4.6	M	34	guest

10087	2023-07-23 08:08	qr.png 07ecd12de259e62383d687d8eac0b089 UPX PE64 PE File VirusTotal Malware unpack itself crashed					2.2	M	41	guest

10088	2023-07-22 21:50	qr.png 07ecd12de259e62383d687d8eac0b089 UPX PE64 PE File VirusTotal Malware unpack itself crashed					2.2	M	40	ZeroCERT

10089	2023-07-22 21:50	Setup.exe bdf59f927ef99ae5b7a45d8e3d05700f Generic Malware Admin Tool (Sysinternals etc ...) Http API HTTP ScreenShot Internet API AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications sandbox evasion installed browsers check Ransomware Lumma Stealer Browser ComputerName Remote Code Execution Firmware	3 Keyword trend analysis	2	1		14.6	M	47	ZeroCERT

10090	2023-07-22 21:49	ROOTROOTROOOTROOOTROTROOTROT%2... 1e2437d520b6cf1964cd8146261ab344 MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed	1 Keyword trend analysis	3	2		4.6	M	34	ZeroCERT

10091	2023-07-22 21:48	freebobux.bin.exe 794b00893a1b95ade9379710821ac1a4 UPX Malicious Library AntiDebug AntiVM PE File PE32 BMP Format MZP Format VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder WriteConsoleW crashed					5.8	M	32	ZeroCERT

10092	2023-07-22 21:47	payload.exe 1dc2580260eb3d20bf700457ce0f235c ScreenShot AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files Windows utilities AppData folder sandbox evasion Firewall state off Windows Browser ComputerName DNS	1 Keyword trend analysis	6	2		15.0	M	63	ZeroCERT

10093	2023-07-22 21:46	asas.exe 103746e75cc79da6379bc879dd58b17a Generic Malware UPX Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware PDB Remote Code Execution					1.4	M	39	ZeroCERT

10094	2023-07-22 21:44	build.exe ed3809d571d4d52fa5bf9339b9750b27 Vidar UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware Telegram MachineGuid Malicious Traffic Creates executable files unpack itself WriteConsoleW Tofsee ComputerName DNS	4 Keyword trend analysis	5	4	1	4.0	M	19	ZeroCERT

10095	2023-07-22 21:44	photo220.exe 1e91a70b891e93ad6124f5d0bee5c7ea Gen1 Emotet UPX Malicious Library CAB PE File PE32 PDB Remote Code Execution					0.8			ZeroCERT