popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10276 2023-07-16 11:07 Inv_LCC_Scan_4.exe  

01f50ef4b9419013f3a3967d7ed734cf


UPX OS Processor Check PE64 PE File VirusTotal Malware Malicious Traffic unpack itself 		1 2 2.4 17 ZeroCERT

10277 2023-07-16 11:06 divinezx.exe  

7565de937291fdf2f686f518f1b16fa5


AgentTesla Generic Malware .NET framework(MSIL) Antivirus KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 2 15.0 51 ZeroCERT

10278 2023-07-15 08:12 ...............dot  

d553bd422c8d3621e21049ccc2ebe680


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware exploit crash unpack itself Exploit DNS crashed 		1 4.2 M 40 guest

10279 2023-07-14 17:27 File_pass1234.7z  

55d5b448bf5e678fc628f7ea9f132a8f


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Fabookie Stealer Windows RisePro Trojan DNS Downloader 		26 54 25 12 6.6 M ZeroCERT

10280 2023-07-14 17:08 Inv_LCC_Scan_4.exe  

01f50ef4b9419013f3a3967d7ed734cf


UPX OS Processor Check PE64 PE File VirusTotal Malware Malicious Traffic unpack itself 		1 2 2.4 17 ZeroCERT

10281 2023-07-14 17:08 Inv_LCC_Scan_2.exe  

9d526a12a1dd2520282bd306e9805559


UPX OS Processor Check PE64 PE File VirusTotal Malware Malicious Traffic unpack itself 		1 2 2.6 26 ZeroCERT

10282 2023-07-14 17:07 idki.hta  

391704abc77b7aeb83bcd9e38ad665c2


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		2 8.4 17 ZeroCERT

10283 2023-07-14 17:07 IBSIBWIBSIBWIBSIBSWIBSIBW%23%2...  

0f68f36e7275b4bdcb316a29e1d5fcfb


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		2 1 6 4.6 M 30 ZeroCERT

10284 2023-07-14 17:06 cmsh.hta  

3c38f1318767a3b84a619187e7e78646


Antivirus VirusTotal Malware unpack itself crashed 		1.0 5 ZeroCERT

10285 2023-07-14 17:05 dwmnj.exe  

f8cfc631cdbba89be07229acfa3bc367


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB 		2.0 M 33 ZeroCERT

10286 2023-07-14 17:03 IE_NET.hta  

ab46abca955700f1d0f904cda6442b7c


Antivirus VirusTotal Malware unpack itself crashed 		1.0 5 ZeroCERT

10287 2023-07-14 17:02 IBWIBMWBIWIBWIBWIBWIBW%23%23%2...  

6e5cd22b7ce011487f8a178ec60a3941


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS crashed 		1 1 3 4.2 M 30 ZeroCERT

10288 2023-07-14 17:02 wins.exe  

2456675bfe2e68d6149c840b1d11dd61


UPX Malicious Library PE File PE32 JPEG Format DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.8 7 ZeroCERT

10289 2023-07-14 16:55 wins.EXE  

a8a27695f1bc25512354f2c6b5e9d037


UPX Malicious Library PE File PE32 JPEG Format DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.8 M 6 ZeroCERT

10290 2023-07-14 16:54 maximan2.1.exe  

d534b629964d561e1e0deccf08ff6687


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder ComputerName 		3 7 1 4.6 31 ZeroCERT

keyword