popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10546 2023-08-18 18:10 s28a1f.exe  

97ae7169e56c372a7d45996303c06d45


Malicious Library PE File PE32 Browser Info Stealer FTP Client Info Stealer suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5.4 ZeroCERT

10547 2023-08-18 18:10 1ds3y.exe  

b78141a544759e1a07740aa28b35584c


Generic Malware Malicious Library UPX Antivirus AntiDebug AntiVM OS Processor Check PE File PE32 PowerShell VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW IP Check Windows ComputerName DNS Cryptographic key crashed 		5 10 3 14.4 M 52 ZeroCERT

10548 2023-08-18 18:04 PolicyChanges.pdf.lnk  

60696fce8c5e2d338afd213a0147d63b


Generic Malware Hide_EXE Suspicious_Script_Bin Downloader Malicious Library UPX Malicious Packer Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger Ant VirusTotal Malware Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW ComputerName 		7 4.4 8 ZeroCERT

10549 2023-08-18 18:01 pass1234_setup.7z  

cd129faa117216c35156304670140b06


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check DNS 		23 48 10 6.2 M ZeroCERT

10550 2023-08-18 17:24 dasHost.exe  

f226785987c5b4c128d4785c6a2d413d


PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key 		2.4 M 23 ZeroCERT

10551 2023-08-18 17:22 ChromeSetup.exe  

e092af3320c668d973ca003e7ecc387f


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		11.8 M 45 ZeroCERT

10552 2023-08-18 17:22 isHost.exe  

700dfeedaf6d739064bdc295eabe23bf


PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.4 M 36 ZeroCERT

10553 2023-08-18 16:09 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

10554 2023-08-18 15:53 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

10555 2023-08-18 15:48 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

10556 2023-08-18 15:40 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

10557 2023-08-18 15:35 sqlite3.dll  

1f44d4d3087c2b202cf9c90ee9d04b0f


UPX PE File DLL PE32 		yjw

10558 2023-08-18 15:26 11f88c287b501abb341631221d59ef...  

48514490face0a58cd5ea063e7de28e0


Malicious Library VMProtect PE File DLL PE64 VirusTotal Malware 		2.2 M 51 yjw

10559 2023-08-18 15:18 11f88c287b501abb341631221d59ef...  

48514490face0a58cd5ea063e7de28e0


Malicious Library VMProtect PE File DLL PE64 VirusTotal Malware 		2.2 M 51 yjw

10560 2023-08-18 15:16 11f88c287b501abb341631221d59ef...  

48514490face0a58cd5ea063e7de28e0


Malicious Library VMProtect PE File DLL PE64 VirusTotal Malware 		2.2 M 51 yjw

keyword