popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10321 2023-07-13 13:18 b.jpg.ps1  

92589da336f8a80a34a764cb763c7e01


Hide_EXE Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 M 11 ZeroCERT

10322 2023-07-13 11:34 File.7z  

a59d6f347f0e85b174d3618a09037237


Escalate priviledges PWS KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.0 M 8 ZeroCERT

10323 2023-07-13 11:29 Passw0rdsz_8686_Setup_Full.rar  

265512707cae9867fa087ed8ba84ae4f


Escalate priviledges PWS KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger Creates executable files unpack itself 		2.0 M ZeroCERT

10324 2023-07-13 11:25 File_pass1234.7z  

93c547f9499216b529205c418fb4e7b0


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS Downloader 		25 48 21 10 6.2 M ZeroCERT

10325 2023-07-13 11:19 b.jpg.vbs  

92589da336f8a80a34a764cb763c7e01


Hide_EXE VirusTotal Malware crashed 		0.8 M 11 ZeroCERT

10326 2023-07-13 09:09 imgengine.dll  

511f56b74826a4e053db05e34f72bd6b


UPX OS Processor Check MZP Format DLL PE File PE32 VirusTotal Malware Checks debugger WMI RWX flags setting unpack itself Check virtual network interfaces Tofsee ComputerName crashed 		1 3 1 4.0 15 ZeroCERT

10327 2023-07-13 09:06 imgengine.dll  

511f56b74826a4e053db05e34f72bd6b


UPX OS Processor Check MZP Format DLL PE File PE32 VirusTotal Malware Checks debugger WMI RWX flags setting unpack itself Check virtual network interfaces Tofsee ComputerName crashed 		1 3 1 4.0 15 ZeroCERT

10328 2023-07-13 09:00 vaferias.png  

922605e4469c97bcfd19b2ae07d18464


ZIP Format VirusTotal Malware 		0.6 10 ZeroCERT

10329 2023-07-13 09:00 SHIPPING_COPY_DOCUMENTS-QRYTR-...  

0bbe430413435af44cd3af7dd542d158


Generic Malware Antivirus Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Windows utilities suspicious process Windows ComputerName DNS Cryptographic key crashed 		1 1 8.6 ZeroCERT

10330 2023-07-13 08:58 Forrderes.exe  

ceaf606490044679c681b1cae6f67bd0


UPX Malicious Library PE File PE32 DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.6 32 ZeroCERT

10331 2023-07-13 07:28 wins.exe  

da4dd59a4f7d449bb43fe614c762ae38


AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		11 12 2 9.0 M 16 ZeroCERT

10332 2023-07-13 07:27 logszx.doc  

9efc5bf89911efa2f7c3e6eb52313b24


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		1 3 6 5.2 M 32 ZeroCERT

10333 2023-07-13 07:25 contactzx.doc  

79055da8c7237e6101b284018ab23880


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware AgentTesla Malicious Traffic ICMP traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		1 4 7 7.4 M 32 ZeroCERT

10334 2023-07-13 07:24 logszx.exe  

ebf3233ae74cc600e4c41f2454be000f


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed 		2 1 11.4 M 33 ZeroCERT

10335 2023-07-13 07:20 contactzx.exe  

b8c4c01af54105fef68157252a11bb69


.NET framework(MSIL) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.4 M 32 ZeroCERT

keyword