popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11266 2023-07-25 18:49 lawzx.doc  

31332915ea2a23d649e1ccb1c15c6a1c


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash Tofsee Windows Exploit DNS crashed 		1 3 7 4.6 M 29 ZeroCERT

11267 2023-07-25 18:49 crypt_se.exe  

bca2197eefdb2e06f4b9cf01f1d3e291


UPX Malicious Library PWS SMTP AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications WriteConsoleW installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 1 12.0 M 27 ZeroCERT

11268 2023-07-25 17:24 abyx.vbs  

531e8d4ce64013bb6cf4afa0eb38eefe


Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 M 8 ZeroCERT

11269 2023-07-25 17:22 1.exe  

df53bb96de4749ce780bf8b939dc2cd5


RedLine stealer UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces WriteConsoleW installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 4 13.4 M 41 r0d

11270 2023-07-25 16:55 clip64.dll  

358ddcec1819198ecad04ef86899feaa


Amadey UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 59 r0d

11271 2023-07-25 16:52 clip64.dll  

2392b231cf4a80739b5cb09bf808127d


Amadey UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 60 r0d

11272 2023-07-25 10:38 HHYGASDBBBX.hta  

2aa4741c22f4f7e9f7fb2318e974649c


Generic Malware Antivirus AntiDebug AntiVM PowerShell MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		2 9.2 17 ZeroCERT

11273 2023-07-25 10:37 shdeulerinstall.lnk  

fcfd7e25e415f1d9ee598ab41ca31840


Generic Malware Antivirus AntiDebug AntiVM GIF Format VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.8 11 ZeroCERT

11274 2023-07-25 09:33 clip64.dll  

358ddcec1819198ecad04ef86899feaa


UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 52 ZeroCERT

11275 2023-07-25 09:12 Untitled2.bmp.ps1  

b503ffd3552cd5a97874afe409f3b469


Generic Malware Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself powershell.exe wrote WriteConsoleW Windows ComputerName Cryptographic key 		16 15 10.6 M 6 ZeroCERT

11276 2023-07-25 09:05 clip64.dll  

2392b231cf4a80739b5cb09bf808127d


UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 55 ZeroCERT

11277 2023-07-25 08:34 pls.exe  

3b32db2fff556c03e79cf112664238fd


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL suspicious privilege Check memory Creates executable files unpack itself AppData folder suspicious TLD DNS 		19 19 2 3.8 M ZeroCERT

11278 2023-07-25 07:59 wininit.exe  

682fbd7115e44f2d2cdac467072a0e24


Formbook .NET framework(MSIL) PWS AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		11 11 10 8.8 M ZeroCERT

11279 2023-07-25 07:55 IBLIBLIBLIBLIBLUBLUBUBIBLIBLIB...  

6042e77faf4b55ffab673816405d31b6


MS_RTF_Obfuscation_Objects RTF File doc buffers extracted RWX flags setting exploit crash Exploit crashed 		2.2 M ZeroCERT

11280 2023-07-25 07:55 lawzx.exe  

68c43b3ca349cc9a76a0a0d52be2e53f


.NET framework(MSIL) PWS AntiDebug AntiVM .NET EXE PE File PE32 PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		11 12 8.2 M ZeroCERT

keyword