popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11221 2023-07-26 11:41 CMSh.hta  

d73b4775abeed46e879675ddd0d311d2


Generic Malware Antivirus AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		1 7.2 14 ZeroCERT

11222 2023-07-26 11:23 File_pass1234.7z  

dd48d433b225a68e26ca5b6446f0e5f9


Escalate priviledges PWS KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself 		1.6 M ZeroCERT

11223 2023-07-26 09:44 vbcript.vbs  

75281ab6ea5a12725d427b34accd2325


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 8.2 M 11 ZeroCERT

11224 2023-07-26 09:41 setup-rc18.exe  

c7feee4698e4d22fead87c243d9cb8ad


UPX PE64 PE File VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself crashed 		3.2 M 35 ZeroCERT

11225 2023-07-26 09:39 system32.vbs  

08548ae48deaeeb8bb880d74ccaf9707


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 7.6 M 2 ZeroCERT

11226 2023-07-26 09:39 ohoyeczx.doc  

51dfac37926ca4687d0a84dd43f491ce


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		1 2 5 4.4 M 28 ZeroCERT

11227 2023-07-26 08:09 secdukaszx.doc  

b3da431b3d8c5c8680024b81ce71bd85


MS_RTF_Obfuscation_Objects RTF File doc Malware download Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		13 14 5 4.0 M ZeroCERT

11228 2023-07-26 08:08 wininit.exe  

99566b51018706a1b36b1440dc9b9d23


Formbook .NET framework(MSIL) AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		14 13 2 12 8.8 M ZeroCERT

11229 2023-07-26 08:02 IDBHIDBHIDBHIDBHIDBHIDBH%23%23...  

454cb83cf56a83f08d9506a7de9e475a


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed 		1 1 3 3.2 M ZeroCERT

11230 2023-07-26 08:00 no_halt_7891.msi  

394f500a708c457b2a5eb4e839896c22


Malicious Library OS Processor Check CAB MSOffice File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 4.4 M 8 ZeroCERT

11231 2023-07-26 07:58 secdukaszx.exe  

410dec2d786b542c67397ab8cc7ecaf3


.NET framework(MSIL) AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		12 13 9.0 M 19 ZeroCERT

11232 2023-07-26 07:58 IBMCENTOSIBMCENTOSIBMCENTOSIBM...  

2d691029ea7c7963db78038eab462842


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		1 4 2 4.2 30 ZeroCERT

11233 2023-07-26 07:58 BBCGBBCGBBCGBBCGBBCGCBBCGBBCGB...  

434a56206f1cda6955268658efeb1db3


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 2 4.2 30 ZeroCERT

11234 2023-07-26 07:56 file.exe  

7c18df4a1aab5314b4a499c3e84f055c


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.6 M 27 ZeroCERT

11235 2023-07-26 07:54 CMSHCMSHCMSHCMSHCMSHCMSH%23%23...  

0697564d77f5fbf7c18d046b70afecb1


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 3 4.6 30 ZeroCERT

keyword