popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10516 2023-08-21 10:08 BRR.exe  

0cb74296cc79ff0a20f5046f8e80d7b0


Themida Packer UPX PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		1 9.4 M 40 ZeroCERT

10517 2023-08-21 10:02 data64_1.exe  

1c76706643695bfd003d768b2c14f925


.NET framework(MSIL) UPX PWS SMTP AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 11.2 40 ZeroCERT

10518 2023-08-21 10:00 QmdMgsGfToPREXeXQyQMhwmt9NvDGE...  

23ec1b2da69f3e63540041a9ccd53840


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		4 15.8 M 36 ZeroCERT

10519 2023-08-21 10:00 data64_3.exe  

8ddf6828d0af91fe8984277aa7b8e497


Gen1 Emotet Malicious Library PE File CAB PE64 .NET EXE PE32 VirusTotal Malware AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder Windows Remote Code Execution Cryptographic key 		2 6.0 40 ZeroCERT

10520 2023-08-21 09:58 data64_2.exe  

48a0efb20b34146d249e1d2ec6e4b635


.NET framework(MSIL) UPX AntiDebug AntiVM PE File .NET EXE PE32 Lnk Format GIF Format VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Windows ComputerName 		10.4 M 40 ZeroCERT

10521 2023-08-21 09:56 okka25.exe  

9a3d39a36e8da1542ed79190e778b587


Malicious Library UPX Malicious Packer PE File PE64 VirusTotal Malware PDB Remote Code Execution crashed 		1.4 M 7 ZeroCERT

10522 2023-08-21 09:49 _rdf_client_8cs.html  

18ed6dd97044aab9c4cf481ebfbde44e


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

10523 2023-08-21 09:47 _literal_rule_8cs.html  

ccf07b81417a66132ce5feb65426a468


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

10524 2023-08-21 09:47 _i_search_client_8cs.html  

3228c6e05c5d0db1313fe8f73e71e95d


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		4.8 guest

10525 2023-08-21 09:46 _i_rdf_connector_8cs.html  

0dff087c0f9b51812aec4622f14150af


AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

10526 2023-08-21 09:44 _elasticsearch_index_mapper_8c...  

8a089c7ce61231914e1a5cf97fe54016


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		4.8 guest

10527 2023-08-21 09:44 _elasticsearch_search_client_8...  

6341577538cb4263d92be4e96cc7a3d4


AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

10528 2023-08-21 09:42 _application_profile_8cs.html  

129ba058f8c8c0c59b11d31cc71f5043


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		5.8 guest

10529 2023-08-21 09:42 _data_type_parser_8cs.html  

1b03557695ec02d65fd5105dc3876681


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

10530 2023-08-21 09:40 _additional_rule_8cs.html  

a0cf36efc70a0753653a53cb9b5e7189


AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

keyword