popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10171 2024-04-29 07:29 fiona.exe  

c0d3bad870f8d2512d2172e4ce6e650f


Themida Packer Malicious Packer UPX Anti_VM PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory buffers extracted unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName Firmware DNS Software crashed 		1 5 7 15.6 M 34 ZeroCERT

10172 2024-04-29 07:28 steam.exe  

5ca52ff25980ef72bd864ad82ba83677


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 33 ZeroCERT

10173 2024-04-29 06:28 UAH-REM-PEF-202324.dll  

9045490ffd594cb9efdb772a5f336dd0


Generic Malware Malicious Library UPX PE64 PE File DLL OS Processor Check VirusTotal Malware PDB 		1.0 1 guest

10174 2024-04-28 01:25 rtx.exe  

46d004a90bfc51d6447a0661f440e7a5


Generic Malware Malicious Library UPX Anti_VM AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces sandbox evasion Windows Java Tor ComputerName WordPress RCE DNS 		45 702 10 14.8 M 45 guest

10175 2024-04-27 17:28 rtx.exe  

46d004a90bfc51d6447a0661f440e7a5


Generic Malware Malicious Library UPX Anti_VM AntiDebug AntiVM PE File PE32 OS Processor Check ENERGETIC BEAR VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces suspicious TLD sandbox evasion Windows Discord Tor ComputerName RCE DNS DDNS 		331 401 18 15.4 M 45 ZeroCERT

10176 2024-04-27 11:58 loader-1000.exe  

705685a8deace858e7fc849471c045f3


NSIS Generic Malware Malicious Library UPX Antivirus PE File PE32 PowerShell DLL OS Processor Check VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		8 8 7 12.0 M 24 ZeroCERT

10177 2024-04-27 11:56 Exodus.exe  

3b43da1be0c39802b78f6b2c55c4d7e6


PE64 PE File VirusTotal Malware DNS 		4 2 2.2 M 39 ZeroCERT

10178 2024-04-27 10:35 0095a2ddc9363c91fc497296555de1...  

aa0b53e96cbf0d9acbeccd55c4b83d75


RedLine Infostealer RedLine stealer RedlineStealer Malicious Library Confuser .NET .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 56 guest

10179 2024-04-27 04:03 13357A53F4C23BD8AC44790AA1DB32...  

204801e838e4a29f8270ab0ed7626555


Emotet Generic Malware Malicious Library UPX PE File PE32 MZP Format OS Processor Check DLL PE64 VirusTotal Malware Checks debugger Creates executable files unpack itself AppData folder crashed 		1 4.0 46 guest

10180 2024-04-26 14:45 fxYvCG6c.exe  

c228f16074d1919a6bf30642a6e6541e


Generic Malware Malicious Library Malicious Packer Antivirus UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		8.6 M 55 guest

10181 2024-04-26 13:23 ad.msi  

666151c11b7899a0c764abe711d3f9b3


Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer UPX MSOffice File CAB OS Processor Check PE File DLL PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AppData folder AntiVM_Disk VM Disk Size Check ComputerName 		2.6 5 ZeroCERT

10182 2024-04-26 13:21 AdvancedIPScanner.msix  

c79834aec56238560ad7f9fb7e96bc85


ZIP Format VirusTotal Malware 		0.6 11 ZeroCERT

10183 2024-04-26 07:22 nikto.exe  

6795efba98699a0cae3c4f729b83ace9


Themida Packer Admin Tool (Sysinternals etc ...) Malicious Packer UPX PE File PE32 ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns MachineGuid Check memory buffers extracted unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser RisePro Email ComputerName Firmware DNS Software crashed 		1 5 6 15.4 28 ZeroCERT

10184 2024-04-26 07:22 tiktok.exe  

6c93fc68e2f01c20fb81af24470b790c


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware PDB 		2.2 36 ZeroCERT

10185 2024-04-25 10:25 HJC.exe  

2cc30d206669699e58870623365fef82


Malicious Library UPX PE File DllRegisterServer dll PE32 MZP Format VirusTotal Malware RWX flags setting unpack itself Tofsee Interception crashed 		2 1 4.2 53 ZeroCERT

keyword