popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10141 2023-07-20 07:59 mjifi  

551c155f4fce82bba4cc92e56f1ecb84


Gen1 UPX Malicious Library PE64 PE File PDB Remote Code Execution 		0.6 ZeroCERT

10142 2023-07-20 07:53 yugozx.exe  

764cb439deb85a06073c46f475956fc4


.NET framework(MSIL) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 4.0 M 29 ZeroCERT

10143 2023-07-20 07:52 MNKLOP873.exe  

a79a555d8074362ce42e03465fc6655d


RedLine Infostealer UltraVNC UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		15 18 2 10.6 M 52 ZeroCERT

10144 2023-07-20 07:51 smss.exe  

9c72d48f384e384c0e3b159f4039298f


Malicious Library PE File PE32 VirusTotal Malware PDB Remote Code Execution 		2.4 44 ZeroCERT

10145 2023-07-20 07:48 ChromeSetup.exe  

12864f3dc3fbedfb22b049d0b7ea8958


NSIS UPX Malicious Library PE File PE32 ZIP Format OS Processor Check DLL VirusTotal Email Client Info Stealer Malware Check memory buffers extracted Creates executable files RWX flags setting unpack itself AppData folder Email ComputerName crashed 		1 4 3 6.4 31 ZeroCERT

10146 2023-07-20 07:48 dollzx.exe  

e6c0c8446f60500e85ea72e966bfcc76


Formbook .NET framework(MSIL) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD Windows DNS Cryptographic key 		2 5 2 8.8 21 ZeroCERT

10147 2023-07-20 07:47 taskhostamd.exe  

54cbe835ac726ec258b58566cab62aaa


UPX MPRESS PE File PE32 JPEG Format Malware download Amadey VirusTotal Malware AutoRuns Malicious Traffic Check memory unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process WriteConsoleW VMware anti-virtualization human activity check Windows ComputerName Remote Code Execution Firmware DNS crashed 		2 2 3 13.4 M 44 ZeroCERT

10148 2023-07-20 07:47 zerno_opt.exe  

d2192209d6892b9bf8e6d155a53b69a5


Vidar LokiBot Gen1 Themida Packer UPX Malicious Library Malicious Packer PWS Anti_VM AntiDebug AntiVM BitCoin .NET EXE PE File PE32 OS Processor Check DLL Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Telegram Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare malicious URLs sandbox evasion VMware anti-virtualization installed browsers check Tofsee Windows Browser Email ComputerName Firmware DNS Software crashed Downloader 		6 8 9 3 22.8 M 28 ZeroCERT

10149 2023-07-20 07:46 choileety.exe  

da9534900ee0d11c9b30cf33152ea03c


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Generic Malware Google Chrome User Data Downloader Admin Tool (Sysinternals etc ...) Antivirus Create Service Socket Escalate priviledges PWS Sniff Audio DNS ScreenShot Internet API KeyLo VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key keylogger 		2 15.2 M 49 ZeroCERT

10150 2023-07-20 07:43 lzoCW4lLiTNeo.exe  

bacd8202f058ddcc5fddf57f8fce99d8


Formbook NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		5 10 1 1 4.6 M 42 ZeroCERT

10151 2023-07-20 07:43 paki.exe  

5e756bc5d404f987517b2684e209b219


.NET framework(MSIL) .NET EXE PE File PE32 Check memory Checks debugger unpack itself 		1.2 M ZeroCERT

10152 2023-07-20 07:41 file.exe  

bedbe012a1b5826fe7f1dec74b63b729


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.0 32 ZeroCERT

10153 2023-07-20 07:40 odinakazx.exe  

780aa063c9da33582456aae81ca77cc8


.NET framework(MSIL) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 2 11.8 21 ZeroCERT

10154 2023-07-20 07:40 windwindiwindiwndinwindnwindin...  

f2501e6b88713ee6aabc13e51bf710a9


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 3 1 5.4 M 26 ZeroCERT

10155 2023-07-20 07:35 IBMIBMIBMIBMIBMIBMIBMIBMIBMIBM...  

a69fc2a504cae835fb45b6a52d05022c


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		2 3 6 4.6 M 32 ZeroCERT

keyword