popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10816 2023-08-10 16:40 158.exe  

55cf389c5f0d6cd71d2f8e4052849e05


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB 		2.0 35 ZeroCERT

10817 2023-08-10 13:53 File_pass1234.7z  

c9438bf4446a3b0c4ffe21bf7ffa0e49


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check DNS 		26 66 16 6.6 M ZeroCERT

10818 2023-08-10 13:34 putty.exe  

406705c7bfb385b0b4646ba2661c6532


Gen1 Generic Malware UPX Malicious Library Antivirus OS Processor Check PE File PE32 VirusTotal Malware powershell PDB suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName Remote Code Execution Cryptographic key 		4.8 25 ZeroCERT

10819 2023-08-10 13:25 kwen.vbs  

65f0061e67f326e70fae0ca85d8e6310


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 10 ZeroCERT

10820 2023-08-10 10:02 independence.hta  

a9d1dd12cb4c7c485f4966ca9963106f


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows Exploit ComputerName DNS Cryptographic key crashed 		9.2 19 ZeroCERT

10821 2023-08-10 09:58 ss.txt.vbs  

d7e90b3e0face4bb9956ab6cd048a102


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 2 7.2 12 ZeroCERT

10822 2023-08-10 09:57 abyx.vbs  

46a7b18113420f49e036d444c40b997a


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 17 ZeroCERT

10823 2023-08-10 09:55 mbio.vbs  

8e88d1c5e3170b1bd22c1d51010058ea


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.6 M 7 ZeroCERT

10824 2023-08-10 09:52 JHB.vbs  

0552b09a1759b110004f0751b9199b7a


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 18 ZeroCERT

10825 2023-08-10 09:50 bdolsx.vbs  

34704256746b33be023ac29363bbf9cd


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 17 ZeroCERT

10826 2023-08-10 09:50 PAXDETAILSpdf.bat  

049b06708b6a9efcbab1cc5c7aba7b3a


Generic Malware Downloader Antivirus Create Service Socket P2P DGA Steal credential Http API Escalate priviledges PWS Sniff Audio HTTP DNS ScreenShot Code injection Internet API FTP KeyLogger AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 2 6.4 1 ZeroCERT

10827 2023-08-10 09:49 Allergy List pdf.scr  

5a5268db3190beda118dfc8a2b0cdd56


Gen1 UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Browser Email ComputerName DNS 		8 1 7.4 8 ZeroCERT

10828 2023-08-10 09:48 HYY.vbs  

5c508dd6580c2abe32455a6c29ac32ae


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 17 ZeroCERT

10829 2023-08-10 09:48 NvjRTZU.wsf  

4d0dc8bd843fdd35e8623e22e3ea8f83

wscript.exe payload download unpack itself crashed 		1 2 1.8 ZeroCERT

10830 2023-08-10 09:47 IMG_050823.com  

cea2cada4cb263247472720686e14e41


.NET EXE PE File PE32 PDB Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName 		2 1.6 ZeroCERT

keyword