popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10741 2023-08-14 09:08 x-8.6.blaze  

69a84378087813dcc137688a49871166


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.4 M 35 ZeroCERT

10742 2023-08-14 09:07 현황조사표.xlsx.lnk  

0eb8db3cbde470407f942fd63afe42b8


Generic Malware Downloader Antivirus Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger Hide_URL AntiDebug AntiVM GIF Format Vulnerability VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		2 1 13.8 27 ZeroCERT

10743 2023-08-14 08:53 clip64.dll  

0e5d0bba336c02519fce133196868ad4


Amadey UPX Malicious Library Admin Tool (Sysinternals etc ...) OS Processor Check DLL PE File PE32 PDB Checks debugger unpack itself 		0.8 ZeroCERT

10744 2023-08-14 07:53 32.exe  

fdb650f759c72c4d408a4da61096ac29


UPX Malicious Library Admin Tool (Sysinternals etc ...) PWS SMTP AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.6 M ZeroCERT

10745 2023-08-14 07:53 wininit.exe  

1188a953c9f36b374ca3714c9de1763e


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		21 22 10 7.8 M ZeroCERT

10746 2023-08-14 07:49 file.exe  

049a6d9199bd6efe409b0ab9fc4cdee6


RedLine stealer UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.2 ZeroCERT

10747 2023-08-14 07:48 file.exe  

9c0492ad620a4028c2f4986a28c409f1


UPX Malicious Library OS Processor Check PE File PE32 PDB DNS 		1 2.6 ZeroCERT

10748 2023-08-14 07:47 wininit.exe  

cb38f35ebcddff1cb735acad8b65096e


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		17 18 10 7.8 M ZeroCERT

10749 2023-08-14 07:46 blackfridaydiscount.exe  

86ee347279e32641070f69e669ec98e2


UPX Malicious Library OS Processor Check PE File PE32 Check memory Checks debugger unpack itself ComputerName 		1.4 ZeroCERT

10750 2023-08-14 07:46 djdffvj.exe  

c8e60225448e9cda23b291b6b16bf78b


UPX Malicious Library OS Processor Check PE File PE32 PDB Remote Code Execution DNS 		2 1.8 ZeroCERT

10751 2023-08-14 07:45 iii.exe  

9a936fa4437b6acf28528e23094339f5


Browser Login Data Stealer Generic Malware Downloader UPX Malicious Library Malicious Packer ScreenShot AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Browser Email ComputerName DNS 		1 3 10.0 M ZeroCERT

10752 2023-08-14 07:41 build666.exe  

328064b232879fe34864e9c6d88608ed


Vidar UPX Malicious Library Anti_VM OS Processor Check PE File PE32 Malware MachineGuid Malicious Traffic Creates executable files unpack itself ComputerName DNS crashed 		4 5 1 3.4 M ZeroCERT

10753 2023-08-14 07:38 kaman.exe  

ca500bce560719b0cd2cfbe3716028d3


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 DLL PDB Code Injection Checks debugger Creates executable files unpack itself AppData folder Remote Code Execution 		3.4 ZeroCERT

10754 2023-08-14 02:25 usbkdp  

adf713f2c1eb97a952412457c4eb310d


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself installed browsers check Browser Email 		3.2 guest

10755 2023-08-14 02:10 ssh-keygen.txt  

7ce66b739995fd30cec1a25636f2579a


ScreenShot AntiDebug AntiVM Check memory unpack itself 		1.0 guest

keyword