popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10111 2023-07-21 13:07 Lightshot.dll  

d335c0fd96458200acaeae1d1b4e136e


UPX Admin Tool (Sysinternals etc ...) Malicious Library Javascript_Blob OS Processor Check MZP Format DLL PE File PE32 VirusTotal Malware Checks debugger unpack itself crashed 		1.6 13 ZeroCERT

10112 2023-07-21 13:05 file.exe  

45c1bb2dd4f6dfababf59f93d90537a5


Malicious Library PE File PE32 VirusTotal Malware PDB Remote Code Execution 		2.2 34 ZeroCERT

10113 2023-07-21 13:04 adobe-explorer.exe  

f6637dd80c1bf55fdf7d31f1d857a155


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself sandbox evasion Browser ComputerName 		2 6.2 14 ZeroCERT

10114 2023-07-21 13:02 saqoap.exe  

8c1e52ac9553fab121ee950749fe1d31


UPX Malicious Library MZP Format PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		2.8 49 ZeroCERT

10115 2023-07-21 13:01 reverse.exe  

80cc187a15b6b6340385922631bad640


UPX PE File PE32 Malware download VirusTotal Malware Microsoft suspicious process WriteConsoleW Exploit DNS 		1 2 2.2 32 ZeroCERT

10116 2023-07-21 11:35 file.pdf.exe  

63faba3aff1b5d9cc631bb722bf6c00e


UPX .NET framework(MSIL) AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.0 M 50 r0d

10117 2023-07-21 10:56 https://optimizationguide-pa.g...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.8 guest

10118 2023-07-21 10:54 https://optimizationguide-pa.g...  


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 1 3.8 guest

10119 2023-07-21 10:53 https://optimizationguide-pa.g...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.2 guest

10120 2023-07-21 10:45 https://optimizationguide-pa.g...  


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.2 guest

10121 2023-07-20 17:29 arc.exe  

7f4e427936de0eecd46ce643bf5c0d36


UPX .NET framework(MSIL) Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Malware download Cobalt Strike Ursnif VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder Interception Windows ComputerName DNS Cryptographic key 		10 6 2 12.2 36 ZeroCERT

10122 2023-07-20 17:22 file.exe  

5c3913024841f5c14f0ef8c9f3d3a4c5


Malicious Library PE File PE32 VirusTotal Malware PDB Remote Code Execution 		2.2 37 ZeroCERT

10123 2023-07-20 17:21 @zerOgr4v1ty_crypted.exe  

b273c68306bfba8fe55a39fe29c5a160


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 4 13.4 31 ZeroCERT

10124 2023-07-20 17:20 Meduza.exe  

40fbeddad5a68665f9cf789dc4658f1a


UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic Windows utilities suspicious process IP Check installed browsers check Tofsee Ransomware Windows Browser Email ComputerName Trojan Banking DNS 		3 3 12.6 36 ZeroCERT

10125 2023-07-20 17:19 ChromeSetup.exe  

34441248d5a40a61b95aa1f20b42f7c0


UPX Malicious Library PE File PE32 DLL PNG Format VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself suspicious process AppData folder Windows crashed 		4.6 14 ZeroCERT

keyword