popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10096 2024-05-03 15:54 buben.exe  

89614bcd95a77224939391e14e6a45d4


EnigmaProtector Malicious Packer PE File PE32 Malware download VirusTotal Malware AutoRuns MachineGuid unpack itself Windows utilities suspicious process WriteConsoleW IP Check Tofsee Windows RisePro ComputerName DNS crashed 		1 5 6 7.6 M 31 ZeroCERT

10097 2024-05-03 15:53 svchosts.exe  

10e53496bc04214f85f2ba5688430edb


XMRig Miner Generic Malware Malicious Library Malicious Packer UPX PE File DllRegisterServer dll PE32 OS Processor Check PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns Check memory Creates executable files unpack itself Auto service Check virtual network interfaces WriteConsoleW Windows ComputerName RCE Firmware 		6.6 53 ZeroCERT

10098 2024-05-03 15:51 1668093182.exe  

9fbc495f7b8396fd10b994d966f88796


Malicious Packer PE File PE32 VirusTotal Malware unpack itself 		2.0 M 63 ZeroCERT

10099 2024-05-03 15:50 prnportlatinos.vbs  

544d0c91d215bdd930d481b2edb9a9ff

VirusTotal Malware VBScript wscript.exe payload download Creates shortcut Check virtual network interfaces Tofsee Dropper 		1 2 2 10.0 M 15 ZeroCERT

10100 2024-05-03 15:49 setup%E4%B8%8B%E8%BD%BD%E5%90%...  

6072310e460bb41fb1a0e5ea9f16e33c


Malicious Library PE64 PE File VirusTotal Malware DNS 		1 3.2 M 46 ZeroCERT

10101 2024-05-03 15:48 vistatharagreatgirlwholovedafi...  

5781051426025f65897f57bcb1ce41ca


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 3 5.2 M 40 ZeroCERT

10102 2024-05-03 15:47 creatednewthingstounderstandho...  

584c735262a9081e8936430d1e631f01


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed Downloader 		1 2 5.0 M 38 ZeroCERT

10103 2024-05-03 15:46 shar.scr  

6dc6f63b7b1a593e209d062c877a488f


LokiBot Malicious Library .NET framework(MSIL) UPX PWS DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs suspicious TLD installed browsers check Browser Email ComputerName DNS Software 		1 1 12.8 M 54 ZeroCERT

10104 2024-05-03 15:45 reallylovelyladylovedfisherman...  

a3fdaa72eed95c9df31ee087177f76c5


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 3 5.0 M 38 ZeroCERT

10105 2024-05-03 15:44 havenewthingstounderstandwhich...  

0aba1094e29ed6d65fa5a8b1ec8c2e57


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 2 5.0 M 38 ZeroCERT

10106 2024-05-03 15:39 loader-1000.exe  

d58a180c5d85448472b4e1007fae4b2a


NSIS Generic Malware Downloader Malicious Library UPX Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 PowerS VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		6 7 9 11.6 M 22 ZeroCERT

10107 2024-05-03 15:35 beautifulroseipictureiseenitss...  

844d25a95681bdf377d72dc961fe7357


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 2 5.0 M 33 ZeroCERT

10108 2024-05-03 08:03 amert.exe  

b47bc18496fcf0de153317af360b3020


Amadey Client SW User Data Stealer Craxs RAT Emotet RedLine stealer RedlineStealer ftp Client info stealer Generic Malware Downloader Malicious Library Antivirus UPX Malicious Packer MPRESS .NET framework(MSIL) VMProtect PWS Create Servi Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Microsoft Telegram Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs suspicious TLD sandbox evasion WriteConsoleW VMware anti-virtualization human activity check installed browsers check Kelihos Tofsee Stealer Windows Browser Email ComputerName DNS Cryptographic key Software crashed Downloader 		25 37 24 6 33.4 M 44 ZeroCERT

10109 2024-05-03 07:59 file.exe  

5451fddd7b59b191df90b89a06ef1691


Generic Malware Malicious Library PE File PE32 VirusTotal Malware RCE 		1.6 M 32 ZeroCERT

10110 2024-05-03 07:57 HSTS.exe  

f970eb941bf3666823b761cea657061c


Malicious Packer UPX PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces 		2 2.6 M 45 ZeroCERT

keyword