popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10576 2023-08-17 18:24 RZWETLQaBpNeo.exe  

f7ebf2e8c35abc0b9bede5448f9c4b38


NSIS Malicious Library UPX ASPack PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Windows Browser Email ComputerName DNS Software crashed keylogger 		3 8.2 M 28 ZeroCERT

10577 2023-08-17 18:23 dasHost.exe  

30971ee638ec6185289994daae14730a


Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows DNS Cryptographic key crashed 		1 3.2 M 46 ZeroCERT

10578 2023-08-17 18:22 update.exe  

392495c31f590a0a04b0c0f1cb0e06a9


Malicious Library UPX Malicious Packer OS Processor Check PE File PE64 VirusTotal Malware Check virtual network interfaces DNS 		1 2.6 M 24 ZeroCERT

10579 2023-08-17 18:22 Logged_2.2.2.exe  

8196727df623b4a40a248835878ffbac


Gen1 Emotet Generic Malware Malicious Library UPX OS Processor Check PE File PE64 DLL ZIP Format VirusTotal Malware Check memory Creates executable files Ransomware 		2.2 M 26 ZeroCERT

10580 2023-08-17 18:21 ghostzx.doc  

e6ec31abd924dd83e5829624c8400bfe


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic ICMP traffic exploit crash unpack itself Exploit DNS crashed 		8 11 5.6 M 29 ZeroCERT

10581 2023-08-17 18:19 ghostzx.exe  

52299a26c9143bd246e0b9daf6d0788c


AntiDebug AntiVM PE File .NET EXE PE32 PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself suspicious TLD 		7 10 9.6 ZeroCERT

10582 2023-08-17 16:09 4ce5f00cf44673e80fcdb462b15f1a...  

c9e6e4d394d7452b79351028c4da0cac


Generic Malware PE File DLL PE64 VirusTotal Malware 		1.2 M 40 yjw

10583 2023-08-17 16:01 pass1234_setup.7z  

8155b0ec79e7e80cdab9b7fbdfac1a4c


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check DNS 		19 41 8 6.2 M ZeroCERT

10584 2023-08-17 13:07 com.apple.Music.2F1000D3-C3AD-...  

4352c7f009793bfbc6c4f82b41bf679d


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		4.2 guest

10585 2023-08-17 13:07 com.apple.dock.2F1000D3-C3AD-5...  

17e0d781c46e575d7cd1a65102b096b5


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

10586 2023-08-17 13:06 com.apple.imservice.SMS.2F1000...  

0b90b856a619d0c9c78143ad7630ae5c


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		4.8 guest

10587 2023-08-17 13:05 ._com.apple.settings.storage.2...  

ffb4d8eb9973259e382c7815301b9990


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

10588 2023-08-17 13:05 ._com.apple.dock.extra.2F1000D...  

9cfb3c75a7c454e60c65e1ed3a167859


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		4.2 guest

10589 2023-08-17 13:04 ._com.apple.Music.2F1000D3-C3A...  

244d40f935ec27eb26baf2e3845527a2


Downloader Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Hijack Network Sniff Audio HTTP DNS ScreenShot Code injection Internet API persistence FTP KeyLogger AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		4.8 guest

10590 2023-08-17 13:02 ._com.apple.FaceTime.2F1000D3-...  

5e7039aa34d83640d808b521e80bd878


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

keyword