popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10126 2024-05-03 07:42 mm.exe  

90023ee5d93707bca67e178daf81830f


Malicious Packer UPX PE64 PE File VirusTotal Malware Checks debugger Check virtual network interfaces DNS 		1 3.2 45 ZeroCERT

10127 2024-05-02 07:31 be.exe  

219ad549c4d74baaf85871c1eb484b2f


Downloader PE File PE32 VirusTotal Malware Check memory WriteConsoleW ComputerName 		3.0 M 54 ZeroCERT

10128 2024-05-02 07:29 setup_6053.exe  

a1361baff4d2c31430365cce9bc2cfff


Generic Malware Malicious Library Antivirus UPX PE64 PE File OS Processor Check Emotet Malware download NetWireRC VirusTotal Malware Code Injection buffers extracted unpack itself sandbox evasion Anonymous RAT DNS crashed 		2 2 7.4 M 19 ZeroCERT

10129 2024-05-02 07:27 EPQ.exe  

615b4b1ddc71f4928bf4afdfaa68231f


Generic Malware Suspicious_Script_Bin Malicious Library UPX PE File PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 3 7.8 M 29 ZeroCERT

10130 2024-05-02 07:26 cock.exe  

bd909fb2282ec2e4a11400157c33494a


Generic Malware Malicious Library Malicious Packer UPX AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself WriteConsoleW Windows DNS Cryptographic key 		1 1 10.0 59 ZeroCERT

10131 2024-05-02 07:24 HJCC.exe  

f28b5bcde00e5c363cb764426ec76324


AgentTesla Malicious Library Admin Tool (Sysinternals etc ...) .NET framework(MSIL) UPX PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed 		12.6 51 ZeroCERT

10132 2024-05-02 07:23 get.php  

378532ba8c8073c2639528b08b15047b


Malicious Library PE File .NET EXE PE32 Malware download njRAT VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself DNS 		3 3 2.8 61 ZeroCERT

10133 2024-05-02 07:22 jSB8SNaV.exe  

af593a9f7ef816da78b444227537c5f2


Gen1 Generic Malware Malicious Library Malicious Packer UPX PE64 PE File OS Processor Check VirusTotal Malware PDB 		1.6 36 ZeroCERT

10134 2024-05-02 07:20 see.exe  

e908276b036728bc78a3dea637580af2


AgentTesla Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 2 3 13.2 32 ZeroCERT

10135 2024-05-02 07:20 scg.exe  

9e5e6b8901f999088856e0eb04746864


Malicious Library Malicious Packer UPX PE64 PE File VirusTotal Malware MachineGuid 		2 3.2 44 ZeroCERT

10136 2024-05-01 17:04 wedesingedfisherboattoundersta...  

0930bc0ba7c5af0fd2ee2a78a98faa22


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 2 5.0 M 37 ZeroCERT

10137 2024-05-01 17:02 fishermansaidyouaremyloverbeca...  

1d4987e736173e36c054c48f4354ab4d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 4 2 5.0 M 35 ZeroCERT

10138 2024-05-01 17:01 bin.exe  

4160db87b054d159be5eb8ee4cd27c38


Generic Malware Malicious Library .NET framework(MSIL) AntiDebug AntiVM PE File .NET EXE PE32 DLL Browser Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		21 21 2 11.0 M 49 ZeroCERT

10139 2024-05-01 17:01 softmindwithagoodheartpersonwi...  

086511c0267905cbda55ede83eb8d7d0


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 5.0 M 37 ZeroCERT

10140 2024-05-01 17:00 jfesawdr.exe  

9fb56dd5b5beb0b9c5d0102f22373c0b


Generic Malware Downloader Malicious Library UPX VMProtect Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P AntiDebug AntiVM PE File PE32 OS Processo VirusTotal Malware PDB Code Injection Creates executable files unpack itself AppData folder ComputerName RCE 		4.6 M 47 ZeroCERT

keyword