popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11161 2023-07-28 14:13 SWISSSWISSSWISSSWISSSIWSSSIWIS...  

b0361a874f097e9000ffc073ad1cccb5


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 3 2 4.6 M 31 ZeroCERT

11162 2023-07-28 14:13 wininit.exe  

2cee30219b059ac64f0b4f363edcf0f5


Formbook .NET framework(MSIL) AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		12 11 10 9.2 M 36 ZeroCERT

11163 2023-07-28 14:12 system.vbs  

bb9912b2bbc3c22d1d4a261020afa0d3


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 7.6 4 ZeroCERT

11164 2023-07-28 14:10 CHMSDFHIDSFIHSIDFHIH%23%23%23%...  

937cc2aa6de4c6b3475b2106c7549bbf


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 1 4.6 M 31 ZeroCERT

11165 2023-07-28 14:09 clip64.dll  

7480f4019e4d41ea6508ce29adab0d2c


Amadey UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 58 ZeroCERT

11166 2023-07-28 14:07 777888_2023-07-27_14-57.exe  

d106422018f67d798c142062e70a5810


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 49 ZeroCERT

11167 2023-07-28 14:07 iwAmDsFecs.exe  

8b1de7ff7c5f0d495c4c66c9ae3e9613


Malicious Library KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Cryptographic key crashed 		7.0 M 24 ZeroCERT

11168 2023-07-28 10:40 yzhuQFZOKoMax.exe  

71c0a5043a21ae67b76f291325de7506


Malicious Library PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 3.0 M 46 ZeroCERT

11169 2023-07-28 10:39 system.vbs  

d64e719c50dcf19c9d911e8eb353a37e


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 8.0 M 20 ZeroCERT

11170 2023-07-28 10:39 Aloic.bmp  

7c75d25fcb55e27a84dba451969ba2e3


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Google Chrome User Data Downloader .NET framework(MSIL) Create Service Socket Escalate priviledges PWS Sniff Audio DNS Internet API KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Remcos VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS keylogger 		1 3 1 10.8 M 39 ZeroCERT

11171 2023-07-28 10:36 FeeeeeeeeeeeeeeFeeeeeeeeeeeeee...  

4f6911ba2cfb8db577523bafa3d70a78


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 1 4.6 M 35 ZeroCERT

11172 2023-07-28 10:35 123.exe  

0e6d97f2465f51dadc93192c8e162f11


RedLine stealer UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 5 11.8 M 37 ZeroCERT

11173 2023-07-28 10:33 jesus.exe  

7b6580f08a43949b795aa68c0e5e45cc


UPX .NET framework(MSIL) Malicious Library Malicious Packer Antivirus OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 63 ZeroCERT

11174 2023-07-28 10:31 wininit.exe  

52911cc84b7dae18ea666f124700b68e


UPX Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.2 M 23 ZeroCERT

11175 2023-07-28 10:30 ChromeSetup.exe  

6f9433489c234b56f12a5e807ad4bfcb


UPX Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.4 M 27 ZeroCERT

keyword