popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11206 2023-07-26 17:30 INV-Details-JUL2023(224).exe  

68def46fcf9076181826880b68a40191


PE64 PE File IcedID Malware download Malware Malicious Traffic unpack itself DNS 		1 2 2 1.6 ZeroCERT

11207 2023-07-26 17:29 xvid123456.exe  

9b3e3201e17442a58e6ff7de9a19f2a8


UPX OS Processor Check .NET EXE PE File PE32 VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger buffers extracted WMI unpack itself Windows ComputerName DNS Cryptographic key 		1 4.6 39 ZeroCERT

11208 2023-07-26 17:28 INV-Details-JUL2023(228).exe  

7606cb661c19b880bb13e39502660c25


PE64 PE File IcedID Malware download Malware Malicious Traffic unpack itself DNS 		1 2 2 1.6 ZeroCERT

11209 2023-07-26 17:26 c2build.exe  

20f0bdb1c1b0fc48e7923a5e9fc65c50


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows Cryptographic key 		2 2 3.8 28 ZeroCERT

11210 2023-07-26 17:25 UpdateProfile.exe  

a3336fcf021e1fb4a7465b4294e4baa7


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 47 ZeroCERT

11211 2023-07-26 17:24 chrome.exe  

d50a781e825e40363b5dec38d4ec39e2


UPX Antivirus Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName keylogger 		13.0 35 ZeroCERT

11212 2023-07-26 17:24 task.exe  

97b1b260abb2e35d57edcca826c9ba9b


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Microsoft Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications WriteConsoleW installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 12.4 46 ZeroCERT

11213 2023-07-26 17:22 TWENTYTWENTYWRWNTWENYWTWNYTWN%...  

efdcd2259b00d25f5eda777e77e6e393


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself IP Check Tofsee Windows Exploit DNS crashed 		1 3 7 5.0 32 ZeroCERT

11214 2023-07-26 14:52 File_pass1234.7z  

dd48d433b225a68e26ca5b6446f0e5f9


Vidar Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Kelihos Tofsee Fabookie Stealer Windows Trojan DNS Downloader 		59 61 33 18 6.6 ZeroCERT

11215 2023-07-26 14:43 lano2.hta  

58f04a5ef090681704054640bf0f1b7c


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		4 2 9.2 15 ZeroCERT

11216 2023-07-26 14:41 system_root.vbs  

b623f2c106911f4e526aecce1eca1261


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 7.8 13 ZeroCERT

11217 2023-07-26 14:36 wininit.exe  

73bbb2587a15c2e32d469cb3abe192c9


NSIS UPX Malicious Library PE File PE32 DLL Check memory Creates executable files unpack itself AppData folder 		2.0 ZeroCERT

11218 2023-07-26 14:36 wininit.exe  

614ef8a46ff7b0f353b6ce2540c30d8e


NSIS UPX Malicious Library PE File PE32 DLL Check memory Creates executable files unpack itself AppData folder 		2.0 ZeroCERT

11219 2023-07-26 14:30 File_pass1234.7z  

dd48d433b225a68e26ca5b6446f0e5f9


Escalate priviledges PWS KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself 		1.6 M ZeroCERT

11220 2023-07-26 13:25 IDBh.hta  

42add60c5e71accdfbb0a16bd34515ae


Generic Malware Antivirus AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		1 7.0 5 ZeroCERT

keyword