popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10096 2023-09-26 19:44 amday.exe  

010a01d7d42e46870c9b44781256dcc8


Amadey Downloader Admin Tool (Sysinternals etc ...) UPX MPRESS Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug Malware download Amadey VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process malicious URLs WriteConsoleW VMware anti-virtualization Windows ComputerName Firmware DNS crashed 		2 3 5 1 18.4 M 56 ZeroCERT

10097 2023-09-26 18:56 pass1234.7z  

0659cc0732eb954c5d74671266a0cbff


PrivateLoader Stealc Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Dridex Malware c&c Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Stealc Stealer Windows RisePro Trojan DNS Downloader 		58 101 46 25 6.0 M ZeroCERT

10098 2023-09-26 18:46 executeInstall - Copy.js  

fcb124a08ae0351cab33214c2eda395f

VirusTotal Malware DNS crashed 		1 2.6 9 ZeroCERT

10099 2023-09-26 18:32 temp.js  

98647908b75a0485ad44a786e5967aa4

VirusTotal Malware DNS crashed 		1 1 2.6 8 ZeroCERT

10100 2023-09-26 18:19 neverban_zBbnJe.vbs  

08cbb6ece8ee6238c20a24691b0c6855

VirusTotal Malware wscript.exe payload download DNS 		1 1 2.4 10 ZeroCERT

10101 2023-09-26 18:18 neverban_vrkvQj.vbs  

e2bcfd5fd4c45b3f95e7e9144f7495c6


[C] All Process AntiDebug AntiVM Malware download VirusTotal Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 1 7.0 M 4 ZeroCERT

10102 2023-09-26 18:18 neverban_pvLGjZ.vbs  

457f92980b658c7332928d72faff99a9


[C] All Process AntiDebug AntiVM Malware download Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		2 1 1 1 6.6 ZeroCERT

10103 2023-09-26 18:11 neverban_LnyakY.pdf  

09e70e63dd0480ee79a5e0ee664abce8


PDF ZIP Format Windows utilities Windows 		5 1.4 ZeroCERT

10104 2023-09-26 18:09 neverban_LRKOPK.vbs  

457f92980b658c7332928d72faff99a9


[C] All Process AntiDebug AntiVM Malware download Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 6.6 ZeroCERT

10105 2023-09-26 18:08 neverban_FFNTdW.vbs  

1769260da8b9bd86d94598a926e93bb5


[C] All Process AntiDebug AntiVM Malware download VirusTotal Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 7.0 4 ZeroCERT

10106 2023-09-26 18:05 neverban_COifEs.vbs  

e2bcfd5fd4c45b3f95e7e9144f7495c6


[C] All Process AntiDebug AntiVM Malware download VirusTotal Malware Code Injection WMI wscript.exe payload download Windows utilities suspicious process WriteConsoleW DarkGate Windows ComputerName DNS Downloader 		1 1 1 1 7.0 M 4 ZeroCERT

10107 2023-09-26 18:05 neverban_dWMkPE.vbs  

1bd0900f5c260ec597662cbcdb396d4a

VirusTotal Malware wscript.exe payload download DNS 		2 1 1 2.2 5 ZeroCERT

10108 2023-09-26 18:05 login_qYxkKH.vbs  

17ad01cded9cce9be82081ad7f0f599a

VirusTotal Malware wscript.exe payload download DNS 		2 1 1 2.2 5 ZeroCERT

10109 2023-09-26 17:52 1.exe  

0ad6deed1fc88623c70e2c9ee906dbb1


Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check GIF Format Lnk Format PNG Format VirusTotal Malware Creates shortcut Creates executable files unpack itself sandbox evasion installed browsers check Browser ComputerName 		3.2 M 41 ZeroCERT

10110 2023-09-26 17:52 for_testing_MoSLxL.msi  

fc34773d1cac889d880340090cffcdde


Generic Malware Malicious Library Antivirus MSOffice File CAB OS Processor Check VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 M 13 ZeroCERT

keyword