popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10786 2023-08-11 16:18 soft.exe  

4e8f34a4c631073808c74481f456e357


Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware crashed 		1.4 51 ZeroCERT

10787 2023-08-11 16:15 twilighttwilight.hta  

163b7346917aa5936bac2b3cb67df947


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows Exploit ComputerName DNS Cryptographic key crashed 		9.2 16 ZeroCERT

10788 2023-08-11 16:15 EpilogStrongyls.exe  

fc44d05db7c9bc9dcebef7e3a5b96d4c


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 40 ZeroCERT

10789 2023-08-11 16:13 build32.exe  

902b8b84ab8e77279f06d1fa4bb769a3


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 46 ZeroCERT

10790 2023-08-11 16:13 msedge.exe  

50e0bef8c8ea8ffab979360ed54e7890


Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key 		2.6 33 ZeroCERT

10791 2023-08-11 16:10 Install Updater (win-stable)-c...  

f1c8a94d79296f81464b3ebd5c84450e


Generic Malware GIF Format Email Client Info Stealer Creates shortcut AntiVM_Disk WriteConsoleW VM Disk Size Check Email 		1 1.6 ZeroCERT

10792 2023-08-11 11:00 local-upd.url  

d4b9ce4e681d712ad2e0e39fdcbd6c6a


AntiDebug AntiVM MSOffice File Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3 1 4.2 guest

10793 2023-08-11 11:00 drop-updater.lnk  

8e13f86d6f5f82200ac569d1c3d2e9ca


Generic Malware Antivirus AntiDebug AntiVM GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 4.8 13 guest

10794 2023-08-11 09:44 wis2war.vbs  

72fab82acb233fa5b2d7aeb5cecf14bb


Hide_EXE Anti_VM PE File VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download Creates executable files unpack itself AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS crashed Dropper 		2 4 10.0 30 ZeroCERT

10795 2023-08-11 09:41 getReasonData.exe  

39a3b5a48178b860ba3c69dfa191e974


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware AutoRuns Windows 		1.6 M 38 ZeroCERT

10796 2023-08-11 09:41 IFB.vbs  

ec8dee0c18ddbd51ba9b3f3da9b3ee5f


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		3 3 9.4 6 ZeroCERT

10797 2023-08-11 09:41 azzo.vbs  

d3a9ae0de027a95f8cd5f176e62f76af


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.4 14 ZeroCERT

10798 2023-08-11 09:39 ss.vbs  

aa006b14ff4ae7b4499ac250b9370f66


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		3 3 8.8 2 ZeroCERT

10799 2023-08-11 09:39 bkop.vbs  

0706d45218e9831bd7caccef79b6425d


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.0 21 ZeroCERT

10800 2023-08-11 09:01 koob7.doc  

22a53781e8ed2786f7151db1d50cf9c1


GuLoader MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed 		3 5 1 4.6 M 31 ZeroCERT

keyword