popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10681 2023-08-16 18:18 1.html  

27f74072d6268b5d96d73107c560d852


Antivirus AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.8 M 8 ZeroCERT

10682 2023-08-16 18:02 1.html  

27f74072d6268b5d96d73107c560d852


Antivirus AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.8 M 8 ZeroCERT

10683 2023-08-16 17:57 1.html  

27f74072d6268b5d96d73107c560d852


Antivirus AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.8 8 ZeroCERT

10684 2023-08-16 17:48 amday.exe  

aa486e83365ae67a5778758685ca4d6f


Amadey UPX .NET framework(MSIL) Malicious Library Admin Tool (Sysinternals etc ...) Http API HTTP Code injection Internet API AntiDebug AntiVM .NET EXE PE File PE32 Lnk Format GIF Format VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Windows ComputerName DNS 		1 1 1 12.2 M 32 ZeroCERT

10685 2023-08-16 17:14 cancellationForm.Client.exe  

a313d9dfd6bddf4cf0412d887719c5be


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself 		2.4 8 ZeroCERT

10686 2023-08-16 17:11 NitroGenerator.exe  

3b690e2f9f6a1184381063aa68bf0842


AntiDebug AntiVM PE64 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting unpack itself Collect installed applications Check virtual network interfaces installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 13.6 M 53 ZeroCERT

10687 2023-08-16 17:11 SuWar3Tools.exe  

ef8272b8854963717097c26092490bf5


RedLine Infostealer UltraVNC UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder Windows Cryptographic key crashed 		5 8 8.4 M 47 ZeroCERT

10688 2023-08-16 15:07 password.chm  

b5f9cd67cb32f44c138c382e17b06fd6


Generic Malware Antivirus Hide_URL AntiDebug AntiVM CHM Format powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process Interception Windows ComputerName Cryptographic key 		1 2 1 6.6 M ZeroCERT

10689 2023-08-16 10:58 hanacard.chm  

2002dd3cf9e2ef96b74a99eee0dd5ec1


Generic Malware Antivirus AntiDebug AntiVM CHM Format PowerShell BMP Format VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10 6 9.0 21 ZeroCERT

10690 2023-08-16 10:20 2.exe  

294fab1523dc3b50cbcc120e67946a5b


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware DNS 		1 3.4 M 56 guest

10691 2023-08-16 09:53 nine18.js  

92cd4dca66b5bebf62d5bdf1454ab6de


Generic Malware Antivirus VirusTotal Malware powershell AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		12 2 9.2 13 ZeroCERT

10692 2023-08-16 09:53 www.vbs  

c863717ead17c4488aa7f85b33ba8b20


WSHRAT Hide_EXE Anti_VM PE File VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download Creates executable files ICMP traffic unpack itself AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS crashed Dropper 		2 4 1 10.0 M 24 ZeroCERT

10693 2023-08-16 09:50 pass1234_setup.7z  

11786f2176a86c420e8ed701afb50b17


Escalate priviledges PWS KeyLogger Anti_VM AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check DNS DDNS 		30 51 10 7.0 M ZeroCERT

10694 2023-08-16 09:39 chromium.vbe  

8e99881fa155be4f5705fddd924ecd63


Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 9.4 2 ZeroCERT

10695 2023-08-16 09:38 6271c26a5690c43c59c23239_PDF2-...  

4ba303dbb08db50b93fdcf0494257467


PDF ZIP Format Windows utilities Windows 		5 1.4 ZeroCERT

keyword