popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10861 2023-08-09 17:12 smokeyzx.exe  

023724470a84b79a9efbde752322ddec


AgentTesla SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 12.8 21 ZeroCERT

10862 2023-08-09 17:11 kellyzx.doc  

b98806523c4916585df3f414296d0905


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		3.2 35 ZeroCERT

10863 2023-08-09 17:10 built.exe  

4f0138b76666d40673be97ceaa9245b4


UPX .NET framework(MSIL) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		2.8 30 ZeroCERT

10864 2023-08-09 17:08 loki.exe  

137141a66c13ca84d8d5856f1bc176c1


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.0 31 ZeroCERT

10865 2023-08-09 17:08 alertzx.doc  

f46867432dd7f3b315b6c29d52ed0edb


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Exploit DNS crashed 		1 3 5.0 27 ZeroCERT

10866 2023-08-09 17:07 MinerFullDetect.exe  

f810de3ef202723a9fa3637e69115da6


UPX Malicious Library PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		1.8 13 ZeroCERT

10867 2023-08-09 17:07 Amday_soft.exe  

c9e4b5e6adfd9dc39449b3de59e562de


Amadey UPX Admin Tool (Sysinternals etc ...) Http API HTTP Code injection Internet API AntiDebug AntiVM .NET EXE PE File PE32 GIF Format VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Windows ComputerName DNS 		2 1 1 12.0 24 ZeroCERT

10868 2023-08-09 17:07 rovezx.doc  

4c86d493d7393a80dc6638a810daed30


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS DDNS crashed 		2 4 6.0 32 ZeroCERT

10869 2023-08-09 17:03 damianozx.doc  

86588b34f68fad2817ac9c8b7eee8568


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself IP Check Exploit DNS crashed 		1 3 4.8 29 ZeroCERT

10870 2023-08-09 17:03 rainbow_loop.exe  

d6dc6b4155cfc36fe8ea78aa82949533


PE File PE32 VirusTotal Malware 		1.0 19 ZeroCERT

10871 2023-08-09 17:03 kellyzx.exe  

7bb907d4c3ec7bb44a0f25f41bad22d2


LokiBot Socket PWS DNS AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 15.0 39 ZeroCERT

10872 2023-08-09 17:02 setup294.exe  

bf6993bcabf40b1643e5d7abf6710762


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 DLL PDB Code Injection Checks debugger unpack itself AppData folder Remote Code Execution 		2.6 ZeroCERT

10873 2023-08-09 14:24 Pass1234_file.7z  

8c849c3860d4cde88ae04546492f17dc


Vidar Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check DNS 		52 59 15 6.6 ZeroCERT

10874 2023-08-09 11:29 MAINNODECPa.htm  

4a8582251db1eb736e1dc4c60fed358e


Generic Malware Antivirus AntiDebug AntiVM powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		2 7.2 ZeroCERT

10875 2023-08-09 11:24 logszx.exe  

f0ffc9ea823029c0b1c45026306957d5


PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed 		2 10.4 ZeroCERT

keyword