popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10216 2023-07-18 18:22 sss.exe  

94d1bb33b8c22334e339d4462d4c0636


Malicious Packer PE64 PE File VirusTotal Malware 		1.2 17 ZeroCERT

10217 2023-07-18 18:21 win32.exe  

3a11f5f7dcb6e3dd51ef7a864c29403f


NSIS UPX Malicious Library PE File PE32 DLL VirusTotal Malware AutoRuns Check memory Creates executable files RWX flags setting unpack itself AppData folder Windows ComputerName crashed 		1 2 1 5.8 42 ZeroCERT

10218 2023-07-18 18:19 invoice.pdf.lnk  

e2ef58cea3134177185a50584111495d


Antivirus AntiDebug AntiVM GIF Format PowerShell powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10.0 ZeroCERT

10219 2023-07-18 18:19 Jcojp.jpg  

d387e700d3de3abafab61f1b5d3b8f27


PE64 PE File MachineGuid Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		1.8 ZeroCERT

10220 2023-07-18 18:17 Client.jpg  

c16d714f359d4659a1f5fef8be99fd30


UPX OS Processor Check .NET EXE PE File PE32 VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself DNS 		1 5.2 55 ZeroCERT

10221 2023-07-18 18:17 winBx.exe  

c03d3f3fac3615256c7c0805743819a2


UPX Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself AppData folder 		3.4 13 ZeroCERT

10222 2023-07-18 18:13 003jfb3bb2.dll  

742ac4a9557745ec565ada6511f4a31f


Malicious Library DLL PE64 PE File PDB Checks debugger unpack itself crashed 		1.6 ZeroCERT

10223 2023-07-18 18:12 03fdbbbb.dll  

5879c02976fe70a64d9dbc0d38b8b973


Malicious Library DLL PE64 PE File PDB Checks debugger unpack itself crashed 		1.6 ZeroCERT

10224 2023-07-18 13:57 idbk.hta  

b4c8fe36366bf1542935f0367270eba5


Generic Malware Antivirus AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		7.0 7 ZeroCERT

10225 2023-07-18 13:57 Invoice-1736478793~pdf.vbs  

01a331d778290adb3b875563a34c0c97


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 5.2 1 ZeroCERT

10226 2023-07-18 13:53 wwwr.exe  

c9ca9b64c5afd8ff22c00b717966283e


AgentTesla Generic Malware .NET framework(MSIL) Antivirus KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key crashed keylogger 		2 2 13.4 36 ZeroCERT

10227 2023-07-18 13:51 Remittance_Advice_120723.exe  

4b53952ca3d4332a530e7a9c9e5f09f7


.NET framework(MSIL) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 48 ZeroCERT

10228 2023-07-18 13:49 g.exe  

cf2f8459d17cd077ead9115058819b45


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.0 32 ZeroCERT

10229 2023-07-18 10:18 File_pass1234.7z  

2e36fd87f02328791390c79351931433


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Cryptocurrency Miner Malware Cryptocurrency suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Remote Code Execution Trojan DNS Downloader 		44 66 27 12 7.0 ZeroCERT

10230 2023-07-18 07:43 wininit.exe  

a147b043c9bf220c3f7c30e5fab35414


.NET framework(MSIL) PWS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		13 14 2 8.6 24 ZeroCERT

keyword