popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10456 2023-07-08 14:07 PTT_20230707-WA01120xlsx.exe  

74c5ede3fd6bf983ae8bf512cdab90ad


AgentTesla Generic Malware UPX .NET framework(MSIL) Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 12.8 39 ZeroCERT

10457 2023-07-08 14:05 class-wp-image-editors.php  

2796bf32abbebdd11a35603f3453214d


Generic Malware task schedule UPX Malicious Library Antivirus AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key crashed 		8 4 1 4 15.2 37 ZeroCERT

10458 2023-07-08 14:03 rcoekta.exe  

a4341997cbad7d63be6f3a07b9783804


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 2 7.4 42 ZeroCERT

10459 2023-07-08 14:02 clip64.dll  

065b19dd4e0258a3cd9b5ef57a405eac


UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 53 ZeroCERT

10460 2023-07-07 18:55 enstomc2.1.exe  

dc1ced16440c1685cfc2bfe7c9fda083


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		4 8 1 4.4 35 ZeroCERT

10461 2023-07-07 18:43 9bd765cdd4c71309_a-lmrnrp.dll  

b9a0d96f9ff58f51d53387be146360aa


.NET DLL DLL PE File PE32 PDB 		0.2 ZeroCERT

10462 2023-07-07 18:39 LoaderWPF.exe  

2f3080389c8825e786dfaffc4969db2a


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.0 18 ZeroCERT

10463 2023-07-07 18:37 Evolion%20Launcher.exe  

ca5edac1d63d63c4e4422fec79b538d4


UPX Malicious Library OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.4 32 ZeroCERT

10464 2023-07-07 18:35 Evolion%20Launcher.exe  

6cadcd483bbc4c11225938b4efb0ac1c


.NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key 		2.6 30 ZeroCERT

10465 2023-07-07 18:34 IntelRealTech.exe  

8c9eb4d9d60900fbb2a07e7990f2fad0


PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		2 1 2.4 30 ZeroCERT

10466 2023-07-07 18:32 out.ps1  

fd7e758aa92a90eaae39ed45b2d6bacd


RedLine stealer Formbook Hide_EXE Generic Malware Antivirus AntiDebug AntiVM .NET DLL DLL PE File PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities AppData folder Windows DNS Cryptographic key 		1 9.6 3 ZeroCERT

10467 2023-07-07 18:28 Evolion%20Launcher.exe  

876283f1527fa588ad861dc2b6cc1b08


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.0 16 ZeroCERT

10468 2023-07-07 18:12 clip64.dll  

dc587d08b8ca3cd62e5dc057d41a966b


UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself DNS 		1 2.6 59 ZeroCERT

10469 2023-07-07 18:08 AMDx46.exe  

759300ac41209528786f5445346ae591


Malicious Library PE64 PE File Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency Malicious Traffic DNS CoinMiner 		1 3 3 3.2 34 ZeroCERT

10470 2023-07-07 10:13 page.html  

f6b00338f9b1aa52396ffb72af40bf04


AntiDebug AntiVM MSOffice File Code Injection unpack itself Windows utilities Tofsee Windows DNS 		4 34 2 3.4 ZeroCERT

keyword