popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10951 2023-08-07 09:05 bullionzx.exe  

f94a7fb16fa08b8d1134b990a8676f51


RedLine stealer .NET framework(MSIL) PWS AntiDebug AntiVM BitCoin .NET EXE PE File PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.0 M 48 ZeroCERT

10952 2023-08-07 09:03 fridayyyOnline.vbs  

7edb95cf9f76fb8ccbb3d2afd0a7c4bd


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 3 1 8.4 M 7 ZeroCERT

10953 2023-08-07 09:01 ChromeSetup.exe  

4a22e79ac77bae6154fc85555cc26460


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 13.0 M 49 ZeroCERT

10954 2023-08-07 08:59 re.exe  

42ac2bba9af99081defe93ce797a3412


Generic Malware PE64 PE File Malware Malicious Traffic unpack itself Sliver DNS 		2 1 1 2.2 M ZeroCERT

10955 2023-08-07 08:57 owenzx.exe  

d1c67a8d11b99696527984f91ce9571f


Formbook AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 1 7.4 M ZeroCERT

10956 2023-08-07 08:57 qasx.vbs  

99152c5481595c0c23bb3b97211c7870


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 5.8 M ZeroCERT

10957 2023-08-07 08:54 demon.exe  

6fc6eb3ed2366b85dca354e44e956a11


Generic Malware PE64 PE File Malware Malicious Traffic unpack itself Sliver DNS 		2 1 1 2.2 M ZeroCERT

10958 2023-08-07 08:54 940000000q0q0q0q0q0q00q0000000...  

ea79aedcc19392bd744e17914373363e


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		1 3 7 3.6 M ZeroCERT

10959 2023-08-07 08:52 HSS.vbs  

b63beb44f618c764181abf3ebe260a72


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 5.8 M ZeroCERT

10960 2023-08-07 08:52 crypted.exe  

1ccbff84cc57f3c7afaa21e68306d4c2


.NET framework(MSIL) .NET EXE PE File PE32 PDB Check memory Checks debugger unpack itself ComputerName 		1.6 M ZeroCERT

10961 2023-08-07 08:50 Documents-EnemyFrauz.exe  

a490f1848b792df4dc37c9e1b200578d


UPX Malicious Library Socket Http API ScreenShot Code injection Internet API AntiDebug AntiVM OS Processor Check PE64 PE File Browser Info Stealer Malware download Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Code Injection Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic Windows utilities Detects VirtualBox suspicious process IP Check installed browsers check Tofsee Ransomware MeduzaStealer Stealer Windows Browser Email ComputerName Trojan Banking DNS 		3 4 17.6 M ZeroCERT

10962 2023-08-07 08:50 ChromeSetup.exe  

4268288fb3dbf0b63cf0836a4201135d


Malicious Library PE File PE32 PDB Remote Code Execution 		1.2 M ZeroCERT

10963 2023-08-07 08:45 key.exe  

8d3c4b58a9943431b824df429088f51e


Suspicious_Script_Bin UPX OS Processor Check .NET EXE PE File PE32 suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2.6 M ZeroCERT

10964 2023-08-07 08:45 RunPEx64.exe  

d9242e75177504019e7c8a78b0f705f2


UPX Malicious Library OS Processor Check PE File PE32 PDB Tofsee Discord DNS 		1 2 3 0.2 M ZeroCERT

10965 2023-08-07 08:43 ChromeSetup.exe  

934834b62d84d90afd7bb755aa12ad81


LokiBot Socket PWS DNS AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 13.8 M 47 ZeroCERT

keyword