popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11146 2023-07-28 17:43 iiis12211221.iso  

4406fceeb2803aebc2345867a9ae292c


UPX Malicious Library OS Processor Check DLL PE64 PE File VirusTotal Malware PDB Checks debugger crashed 		1.2 3 ZeroCERT

11147 2023-07-28 17:41 1751181521.exe  

3ceea9ca97ab640b53ce77eccb5da1fd


UPX Malicious Library OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 5 6.6 43 ZeroCERT

11148 2023-07-28 17:40 postmon.exe  

8bdd901591eb90456ad781e3c79bb4ad


Generic Malware UPX Malicious Library Malicious Packer Antivirus OS Processor Check PE File PE32 PowerShell Malware download VirusTotal Malware powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows ComputerName Remote Code Execution DNS Cryptographic key Downloader 		10 3 2 1 10.0 M 57 ZeroCERT

11149 2023-07-28 17:39 videoLan.exe  

62472c78b3ab085422418e49dd2aa11c


PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency unpack itself 		2 1 2.0 41 ZeroCERT

11150 2023-07-28 17:34 resource2.exe  

8f271cac1a0930295f3a9355008729f4


Vidar LokiBot Gen1 UPX Admin Tool (Sysinternals etc ...) Malicious Library Malicious Packer PWS AntiDebug AntiVM BitCoin .NET EXE PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Telegram Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser Email ComputerName DNS Software 		5 5 4 1 19.6 M 39 ZeroCERT

11151 2023-07-28 17:34 777888_2023-07-27_17-35.exe  

0a8d5dd535e009d4109c690be03bb0c1


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 46 ZeroCERT

11152 2023-07-28 17:30 22222.exe  

d42a28aa817408fdfeb8f26528521253


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 6.2 M 48 ZeroCERT

11153 2023-07-28 17:28 cred64.dll  

ad29bf6fe83170168693e9a8b2707b58


Browser Login Data Stealer UPX Malicious Library OS Processor Check DLL PE64 PE File VirusTotal Malware PDB Checks debugger installed browsers check Browser ComputerName crashed 		2.4 M 56 ZeroCERT

11154 2023-07-28 17:27 wininit.exe  

a0bfccb8cc68d350b02287d70507e70d


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder suspicious TLD DNS 		11 14 2 6.0 M 47 ZeroCERT

11155 2023-07-28 17:27 damianozx.doc  

f69ceb677edfd92ee1cececc01fcfeba


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		1 3 7 4.8 M 27 ZeroCERT

11156 2023-07-28 17:27 util.exe  

37e965330586a51125db2a420917db17


UPX .NET framework(MSIL) Malicious Library Malicious Packer Antivirus OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 60 ZeroCERT

11157 2023-07-28 17:24 damianozx.exe  

370c0660c08162ab7d2a8737cd3ab1e0


.NET framework(MSIL) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 M 25 ZeroCERT

11158 2023-07-28 14:20 HMSDFHJSJDHFJHIIFSIDH%23%23%23...  

a659a09f30b9663ba5f22a784856729a


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed 		1 1 1 4.6 M 30 ZeroCERT

11159 2023-07-28 14:17 n47FJITc.exe  

f078b804fc4d54586eea6a32dd7463e6


PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2 3.2 M 52 ZeroCERT

11160 2023-07-28 14:15 vbc.exe  

c12fbddc2c7ae2eb6b4431bb52646d4d


UPX Malicious Library PE File PE32 DLL .NET DLL PE64 GIF Format VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself suspicious process AppData folder crashed 		1 4.0 M 31 ZeroCERT

keyword