Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player
11311	2023-07-23 09:46	new.exe 8bb15c76e2d55780ced07a1a2c589486 Lazarus Family Themida Packer UPX Malicious Library Http API HTTP ScreenShot Internet API AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare sandbox evasion VMware anti-virtualization installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Firmware crashed	4 Keyword trend analysis	2	1	3	17.4	M	24	ZeroCERT

11312	2023-07-23 09:45	System_root.vbs 994ed6b1d35267618f3d7f73833664d7 Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key	1 Keyword trend analysis	2	1		7.6	M	3	ZeroCERT

11313	2023-07-23 09:43	bilkad.exe c4fe973e479a2af02dce5b9888e97917 PE64 PE File VirusTotal Malware crashed					2.2	M	42	ZeroCERT

11314	2023-07-23 09:43	file.exe fff2f00fa9387530fb724fb44855b4f3 UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution					2.0	M	31	ZeroCERT

11315	2023-07-23 08:11	ROOTROOTROOOTROOOTROTROOTROT%2... 1e2437d520b6cf1964cd8146261ab344 MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed	1 Keyword trend analysis	3	2		4.6	M	34	guest

11316	2023-07-23 08:08	qr.png 07ecd12de259e62383d687d8eac0b089 UPX PE64 PE File VirusTotal Malware unpack itself crashed					2.2	M	41	guest

11317	2023-07-22 21:50	qr.png 07ecd12de259e62383d687d8eac0b089 UPX PE64 PE File VirusTotal Malware unpack itself crashed					2.2	M	40	ZeroCERT

11318	2023-07-22 21:50	Setup.exe bdf59f927ef99ae5b7a45d8e3d05700f Generic Malware Admin Tool (Sysinternals etc ...) Http API HTTP ScreenShot Internet API AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications sandbox evasion installed browsers check Ransomware Lumma Stealer Browser ComputerName Remote Code Execution Firmware	3 Keyword trend analysis	2	1		14.6	M	47	ZeroCERT

11319	2023-07-22 21:49	ROOTROOTROOOTROOOTROTROOTROT%2... 1e2437d520b6cf1964cd8146261ab344 MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Exploit DNS crashed	1 Keyword trend analysis	3	2		4.6	M	34	ZeroCERT

11320	2023-07-22 21:48	freebobux.bin.exe 794b00893a1b95ade9379710821ac1a4 UPX Malicious Library AntiDebug AntiVM PE File PE32 BMP Format MZP Format VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder WriteConsoleW crashed					5.8	M	32	ZeroCERT

11321	2023-07-22 21:47	payload.exe 1dc2580260eb3d20bf700457ce0f235c ScreenShot AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files Windows utilities AppData folder sandbox evasion Firewall state off Windows Browser ComputerName DNS	1 Keyword trend analysis	6	2		15.0	M	63	ZeroCERT

11322	2023-07-22 21:46	asas.exe 103746e75cc79da6379bc879dd58b17a Generic Malware UPX Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware PDB Remote Code Execution					1.4	M	39	ZeroCERT

11323	2023-07-22 21:44	build.exe ed3809d571d4d52fa5bf9339b9750b27 Vidar UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware Telegram MachineGuid Malicious Traffic Creates executable files unpack itself WriteConsoleW Tofsee ComputerName DNS	4 Keyword trend analysis	5	4	1	4.0	M	19	ZeroCERT

11324	2023-07-22 21:44	photo220.exe 1e91a70b891e93ad6124f5d0bee5c7ea Gen1 Emotet UPX Malicious Library CAB PE File PE32 PDB Remote Code Execution					0.8			ZeroCERT

11325	2023-07-22 21:43	elevator.exe 5f6c86ec159f2b0d99f88bc3c3c6a641 UPX Malicious Library OS Processor Check PE64 PE File VirusTotal Malware WriteConsoleW					1.0	M	19	ZeroCERT