popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10111 2024-05-03 08:03 amert.exe  

b47bc18496fcf0de153317af360b3020


Amadey Client SW User Data Stealer Craxs RAT Emotet RedLine stealer RedlineStealer ftp Client info stealer Generic Malware Downloader Malicious Library Antivirus UPX Malicious Packer MPRESS .NET framework(MSIL) VMProtect PWS Create Servi Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Microsoft Telegram Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs suspicious TLD sandbox evasion WriteConsoleW VMware anti-virtualization human activity check installed browsers check Kelihos Tofsee Stealer Windows Browser Email ComputerName DNS Cryptographic key Software crashed Downloader 		25 37 24 6 33.4 M 44 ZeroCERT

10112 2024-05-03 07:59 file.exe  

5451fddd7b59b191df90b89a06ef1691


Generic Malware Malicious Library PE File PE32 VirusTotal Malware RCE 		1.6 M 32 ZeroCERT

10113 2024-05-03 07:57 HSTS.exe  

f970eb941bf3666823b761cea657061c


Malicious Packer UPX PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces 		2 2.6 M 45 ZeroCERT

10114 2024-05-03 07:55 random.exe  

6b31dd4a6560603dfe9f833ca5dd4d7d


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger installed browsers check Browser 		3.4 M 22 ZeroCERT

10115 2024-05-03 07:55 BackgroundRemover-Setup.exe  

7e37f8c945d005226870e60aa2baea93


Generic Malware Malicious Library Malicious Packer UPX PE64 PE File DllRegisterServer dll OS Processor Check 		M ZeroCERT

10116 2024-05-03 07:53 mtls.exe  

3b65343bff4c7397ed19ef22efaae899


Malicious Packer UPX PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces 		2 2.4 M 36 ZeroCERT

10117 2024-05-03 07:51 noa.exe  

ce55e5869c5b7274fdfee8145058a015


AgentTesla Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 3 3 14.0 M 38 ZeroCERT

10118 2024-05-03 07:50 sarra.exe  

9108c53602981487b7b44c2729fbd5bc


Anti_VM PE File PE32 Malware download VirusTotal Malware AutoRuns MachineGuid Checks debugger unpack itself Windows utilities Checks Bios Detects VMWare suspicious process WriteConsoleW VMware anti-virtualization IP Check Tofsee Windows RisePro ComputerName DNS crashed 		1 6 4 10.8 M 40 ZeroCERT

10119 2024-05-03 07:49 mm2.exe  

497d88a78d010a02672474e9cf67b5ff


Malicious Packer UPX Anti_VM PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces DNS 		1 3.2 M 45 ZeroCERT

10120 2024-05-03 07:48 go.exe  

b8e5ad86c9e9b3aef46098f287e8b0ac


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check MSOffice File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		8 7 1 5.8 M 18 ZeroCERT

10121 2024-05-03 07:48 flash.cn.exe  

49e2d38242e314cb72ff7a297dbf132f


Malicious Library PE64 PE File VirusTotal Malware RWX flags setting unpack itself ComputerName DNS 		1 5.2 M 55 ZeroCERT

10122 2024-05-03 07:46 sok.exe  

ec7154a50488ecfd5936b6fd10e0a8e3


SystemBC Malicious Library Antivirus PE File PE32 VirusTotal Malware powershell AutoRuns Windows DNS 		1 1 4.4 56 ZeroCERT

10123 2024-05-03 07:45 GVV.exe  

fa3641c75d2beb68c01e8065eefc4707


Generic Malware Suspicious_Script_Bin Malicious Library UPX ScreenShot AntiDebug AntiVM PE File PE32 OS Processor Check Browser Info Stealer Remcos VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Windows Browser Email ComputerName DNS DDNS keylogger 		1 4 2 13.8 22 ZeroCERT

10124 2024-05-03 07:44 lenin.exe  

51eb099e680eb872a3619c63edcfdc5a


UPX PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory Checks debugger buffers extracted unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName DNS Software crashed 		1 5 8 16.0 37 ZeroCERT

10125 2024-05-03 07:42 build22.exe  

06c758c576de9e18db3394f1044b27ae


NSIS Generic Malware Malicious Library UPX Antivirus PE File PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.4 M 15 ZeroCERT

keyword