popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10411 2023-07-11 09:36 schtasks.exe  

b32e6ee308372d87ba59b9e851b35972


AsyncRAT UPX .NET framework(MSIL) Malicious Packer OS Processor Check .NET EXE PE File PE32 Malware download AsyncRAT NetWireRC Malware DNS 		1 2 0.6 ZeroCERT

10412 2023-07-11 09:34 194.169.175.136:3002  

beb8f75815003ffcee31bc2626bbe2d9


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB 		1.8 26 ZeroCERT

10413 2023-07-11 09:33 h.html  

1c87f3cd6fb4a0197977a9d7365a5e09

unpack itself crashed 		0.6 ZeroCERT

10414 2023-07-11 07:59 csrssd.exe  

c415c178036686bf3a3fbd8dc296a686


.NET framework(MSIL) AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS crashed 		18 21 4 10.0 M 29 ZeroCERT

10415 2023-07-11 07:47 2.jpg  

7416ede6924c85117720a8a9d158c67f


.NET EXE PE File PE32 Malware download NetWireRC VirusTotal Malware PDB suspicious TLD IP Check RAT DNS 		1 4 3 3.8 33 ZeroCERT

10416 2023-07-11 07:46 haitianzx.doc  

39c47863ba1127bb0f46600ac15e2349


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Windows Exploit DNS crashed 		2 4 7 5.2 31 ZeroCERT

10417 2023-07-11 07:45 photo540.exe  

0b18dc187ed40a7a6310a6c4ba98ec91


Gen1 Emotet SmokeLoader UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger WMI Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		5 3 13 17.4 M ZeroCERT

10418 2023-07-11 07:37 LUG.exe  

467aa373b20db6d16cd7a3a5d9bab790


.NET framework(MSIL) .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.4 M 31 ZeroCERT

10419 2023-07-11 07:33 templezx.doc  

96908698ef1a19e7b6c4cc2f52637d3b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		3.2 33 ZeroCERT

10420 2023-07-11 07:33 Your.exe  

1344dd42f796869f3091e194b0d819da


UPX .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 29 ZeroCERT

10421 2023-07-10 18:55 a.exe  

1d35572dfa6a564b147bad355ad1be78


UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware 		1.8 M 43 ZeroCERT

10422 2023-07-10 18:20 foto175.exe  

2415dbdd83d587bd33b25678273cb84a


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer OS Processor Check PE File PE32 DLL .NET EXE CAB Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 10 16.0 M ZeroCERT

10423 2023-07-10 18:17 new64.dll  

e8adc07619649cf7775aca6366e44505


Malicious Library DLL PE64 PE File VirusTotal Malware Checks debugger unpack itself DNS 		1 2.4 11 ZeroCERT

10424 2023-07-10 18:16 fotod45.exe  

09cea48e485e3b4f35e25db8aef6926c


Gen1 Emotet SmokeLoader UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer OS Processor Check PE File PE32 DLL CAB .NET EXE Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed Downloader 		4 3 13 17.0 M ZeroCERT

10425 2023-07-10 18:13 notepad.exe  

f2e100f576b44fdb37d874db2e48085c


Emotet UPX MPRESS PE64 PE File VirusTotal Malware Remote Code Execution crashed 		2.2 M 26 ZeroCERT

keyword