popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10831 2023-08-10 09:46 HGG.vbs  

aaa8244c698233bc249ddda1e6db6ce6


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.0 M 20 ZeroCERT

10832 2023-08-10 09:44 setup.vbs  

2308efc0d4f8e10e983f3fb5ac87ae8c


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 9.0 M 2 ZeroCERT

10833 2023-08-10 09:44 MSK.vbs  

ae98e919568e778817d4668f82242cf4


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 17 ZeroCERT

10834 2023-08-10 09:40 IGUU.vbs  

31e9ee45e3a0e6c4c020ac248a843a7d


Generic Malware Antivirus Hide_URL PowerShell Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		3 4 11.0 M ZeroCERT

10835 2023-08-10 09:40 ChromeSetup.vbs  

150a2b851e3ccbf928d862a05b37636c


Generic Malware Antivirus UPX Malicious Library PE File PE32 DLL PE64 PNG Format VirusTotal Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 9.4 M 3 ZeroCERT

10836 2023-08-10 09:36 X.vbs  

bf2d0d0575cf2e9bc9de0885bd8fb666


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 9.4 2 ZeroCERT

10837 2023-08-10 09:36 update.vbs  

bb0c35cecf43175858984c3d8bc97e97


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 3 8.4 2 ZeroCERT

10838 2023-08-10 08:00 images.exe  

fc0b349cceb4042ecb9759e9a519ca95


.NET framework(MSIL) .NET EXE PE File PE32 PDB Check memory Checks debugger unpack itself 		1.4 M ZeroCERT

10839 2023-08-10 07:58 smss.exe  

762df4801061068efc7a2dfbeb555701


.NET framework(MSIL) .NET EXE PE File PE32 PDB Check memory Checks debugger unpack itself 		1.4 M ZeroCERT

10840 2023-08-10 07:57 WmiPrvSE.exe  

f46119800d530db454ce9d90e12d2d67


Formbook NSIS UPX Malicious Library Malicious Packer PE File PE32 suspicious privilege Check memory Creates executable files ICMP traffic unpack itself AppData folder DNS 		23 24 22 4.8 M ZeroCERT

10841 2023-08-10 07:57 damianozx.exe  

aefddcdc823f16072869862f35db8dae


AgentTesla KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 9.6 M ZeroCERT

10842 2023-08-10 07:54 AdobeSettings.exe  

e781ca8ce0cf2ede3c242c2bdc1ea2a4


NSIS UPX Malicious Library PE File PE32 DLL AppData folder 		0.6 M ZeroCERT

10843 2023-08-10 07:50 defense.exe  

eb11d76f4db6786d48ef7ae3f6c3ad9a


UPX Malicious Library OS Processor Check PE File PE32 PDB buffers extracted unpack itself sandbox evasion Browser ComputerName DNS 		1 4.4 M ZeroCERT

10844 2023-08-10 07:49 html.exe  

77f82a88068d77ba9ece00d21bf3a4db


UPX Malicious Library OS Processor Check PE File PE32 PDB Code Injection Checks debugger buffers extracted unpack itself sandbox evasion Browser ComputerName DNS 		1 6.2 M ZeroCERT

10845 2023-08-10 07:48 a3e34cp.exe  

92031e02bc46932ace98fb8b54f261f4


Amadey UPX VMProtect Malicious Library PE File PE32 Malware AutoRuns Malicious Traffic Check memory unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName DNS 		2 2 2 8.0 M ZeroCERT

keyword