popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10156 2023-07-20 07:34 idbkiidbkidibkidibkidbkidibki%...  

072892874a099e1dc789a8c94a38ce7b


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed 		1 1 3 4.6 31 ZeroCERT

10157 2023-07-20 07:03 smbscanlocal-1bf850b4d9587c101...  

1bf850b4d9587c1017a75a47680584c4


UPX PE File PE32 VirusTotal Malware WriteConsoleW 		3.0 M 56 guest

10158 2023-07-20 06:58 smbscanlocal-1bf850b4d9587c101...  

1bf850b4d9587c1017a75a47680584c4


UPX PE File PE32 VirusTotal Malware WriteConsoleW 		3.0 M 56 guest

10159 2023-07-19 15:41 smbscanlocal-1bf850b4d9587c101...  

1bf850b4d9587c1017a75a47680584c4


UPX PE File PE32 VirusTotal Malware WriteConsoleW 		3.0 M 56 ZeroCERT

10160 2023-07-19 15:39 watchdog.exe  

8e67f58837092385dcf01e8a2b4f5783


UPX PE File PE32 VirusTotal Malware Creates executable files WriteConsoleW Trojan DNS 		1 4.6 M 58 ZeroCERT

10161 2023-07-19 15:38 ChromeSetup.exe  

70462b94519e8f0354cdde7584e536ce


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL VirusTotal Email Client Info Stealer Malware AutoRuns Check memory Creates executable files RWX flags setting unpack itself AppData folder Windows Email ComputerName crashed 		1 4 2 6.8 M 39 ZeroCERT

10162 2023-07-19 15:36 dollzx.exe  

948b8c028268c704b439071a9fe65538


Formbook UPX .NET framework(MSIL) AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3 6 1 8.6 M 30 ZeroCERT

10163 2023-07-19 15:35 11.sfx.exe  

1ac19ec30a52e2b8c80bd93f8aab003a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB Creates executable files Remote Code Execution 		2.8 34 ZeroCERT

10164 2023-07-19 15:03 File_pass1234.7z  

46ad54c4ee3c4d92f87f62c0d7ca7c38


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Cryptocurrency Miner Malware Cryptocurrency suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Remote Code Execution Trojan DNS Downloader 		27 60 27 12 7.0 M ZeroCERT

10165 2023-07-19 14:41 미군 구인공고 웹사이트 주소 및 사용방법 안내.zip...  

6277fee38a64f218291c73db5326e1bf


ZIP Format VirusTotal Malware 		0.4 7 ZeroCERT

10166 2023-07-19 14:31 dma.hta  

9302aa42d7bd92c8bfe93a441fe7b147


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		2 9.2 17 ZeroCERT

10167 2023-07-19 09:38 CTFMON.EXE  

842b0d0eb01716a9f526acd866d8bad3


Emotet Gen1 UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware Malicious Traffic Check memory unpack itself 		1 2 1 2.6 25 ZeroCERT

10168 2023-07-19 09:26 Multi National Recruitment Sys...  

3c5aacd54c4f9baa9a58423b3fe0969d


Antivirus AntiDebug AntiVM GIF Format VirusTotal Malware Code Injection Creates shortcut suspicious process WriteConsoleW 		2.4 3 ZeroCERT

10169 2023-07-19 09:16 Document_of_file_newshipment_p...  

5d13e163a153f92e5f656a1fd26269df

VirusTotal Malware wscript.exe payload download Check virtual network interfaces Tofsee DNS crashed 		3 5 2 3.0 20 ZeroCERT

10170 2023-07-19 09:15 DIEN TT_SACOMBANK 15052023_907...  

e70e36db9a2ee974d0f245b469b0b7c7


Suspicious_Script_Bin UPX Malicious Library PE File PE32 PNG Format DLL OS Processor Check PE64 VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.8 39 ZeroCERT

keyword