popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11296 2023-07-24 16:56 IBNSDIFBSDNIWEFBSIFNFSIDFBISDN...  

f6abfd2fa1bf65db8d73e3c3ed3c76a5


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed 		2 3 1 4.6 M 30 ZeroCERT

11297 2023-07-24 16:30 FreeWMAToMP3Converter.exe  

b4d654755e5fb496138ed0e9c4121e84


Emotet Gen1 UPX Malicious Library Malicious Packer AntiDebug AntiVM MZP Format PE File PE32 MSOffice File PNG Format DLL PE64 GIF Format OS Processor Check JPEG Format Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check Tofsee Windows Exploit ComputerName DNS crashed 		1 2 2 7.0 Speedmeup

11298 2023-07-24 13:20 "https://tglrrran.0rg.shop/"  


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3.8 ZeroCenter

11299 2023-07-24 09:33 kgec63hr0ubmn.exe  

79982cf6836eebddfc2aa3e773f54f38


Generic Malware UPX Malicious Library Antivirus AntiDebug AntiVM OS Processor Check PE File PE32 PowerShell VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW IP Check Tofsee Windows ComputerName DNS Cryptographic key crashed 		5 10 3 14.4 30 ZeroCERT

11300 2023-07-24 09:32 setup294.exe  

ea7a66c1eaf1ddaca7ad98a7b8490099


UPX Malicious Library Create Service Escalate priviledges AntiDebug AntiVM OS Processor Check PE File PE32 DLL PDB Code Injection unpack itself AppData folder Remote Code Execution DNS 		1 3.0 ZeroCERT

11301 2023-07-24 09:13 install-alevrola.exe  

8d6d682cbd51a88075c184966aa0de17


Generic Malware Malicious Library UPX PE File PE32 PNG Format MZP Format GIF Format AutoRuns Check memory Creates shortcut Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName Remote Code Execution DNS 		8 2 3.8 guest

11302 2023-07-24 09:12 install-alevrola.exe  

8d6d682cbd51a88075c184966aa0de17


Generic Malware Malicious Library UPX PE File PE32 GIF Format PNG Format MZP Format VirusTotal Malware AutoRuns Check memory Creates shortcut Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName 		4.4 57 guest

11303 2023-07-24 09:06 File_pass1234.7z  

4d25d513d85869b1c08713a0f9c11718


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Cryptocurrency Miner Malware Cryptocurrency Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Remote Code Execution Trojan DNS Downloader 		28 69 31 12 7.0 M ZeroCERT

11304 2023-07-24 07:42 photo170.exe  

65c0aab9f3cc5187b6d90b66fc734abc


Gen1 Emotet RedLine Infostealer RedLine stealer UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer .NET framework(MSIL) Confuser .NET CAB PE File PE32 OS Processor Check DLL PE64 .NET EXE Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Kelihos Tofsee Stealer Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed Downloader 		6 6 18 6 18.4 M ZeroCERT

11305 2023-07-24 07:39 file.exe  

a931716cf0d4b79b442699547acce00a


UPX Malicious Library OS Processor Check PE File PE32 unpack itself 		0.8 M ZeroCERT

11306 2023-07-24 07:39 taskmask.exe  

126db18bbcf58a186b422970c57e4dbf


Emotet UPX Admin Tool (Sysinternals etc ...) Malicious Library PWS SMTP AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 3 2 13.6 50 ZeroCERT

11307 2023-07-24 07:37 file.exe  

8fa8bfb9b75a7c33d9d8cc65a7172a7c


UPX Malicious Library OS Processor Check PE File PE32 unpack itself 		0.8 M ZeroCERT

11308 2023-07-24 05:09 IMG-20230723-WA0017.jpg  

3bdfda87698750389aa90c72652c25bf


JPEG Format 		guest

11309 2023-07-23 13:33 ROOTROOTROOOTROOOTROTROOTROT%2...  

1e2437d520b6cf1964cd8146261ab344


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed 		1 3 2 1 4.6 M 34 guest

11310 2023-07-23 09:54 safevpn20.11342.2k.exe  

6bafba4a43173045136e95abe78666e8


Gen1 Emotet Suspicious_Script_Bin Generic Malware UPX Malicious Library ASPack Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM OS Processor Check PE64 PE File icon DLL ZIP Format BMP Format Browser Info Stealer VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself Windows Browser 		3.6 37 ZeroCERT

keyword