popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11491 2023-07-17 13:25 an.exe  

09ab5b40d8ea72b0fc02000284e22169


RedLine Infostealer UltraVNC UPX Malicious Library VMProtect OS Processor Check PE File PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger WMI Creates executable files RWX flags setting unpack itself Windows ComputerName Cryptographic key crashed 		6.2 M 23 ZeroCERT

11492 2023-07-17 13:14 Receipt-894324.xls  

73f2506109fae384bc40c7ba7cb5fc9c


VBA_macro MSOffice File VirusTotal Malware Check memory unpack itself suspicious process 		10 1 3.2 M 37 guest

11493 2023-07-16 11:19 texaszx.doc  

ab48983ce4d1c89f69c4db12cc86f934


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed 		1 3 7 5.0 37 ZeroCERT

11494 2023-07-16 11:18 sk.exe  

6e7ecd0389a97aa765eca10d5741b882


RedlineStealer RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 4 8.0 58 ZeroCERT

11495 2023-07-16 11:17 deep.exe  

404da62e0999dcbc4ee9907f5a9b56b6


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 36 ZeroCERT

11496 2023-07-16 11:16 post.exe  

bf34de529a120cc9a93664aae4bd83c3


RedlineStealer RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 4 8.0 65 ZeroCERT

11497 2023-07-16 11:14 file.exe  

0644a6d1a7994445f05f3d4e20e82140


Themida Packer Generic Malware Anti_VM .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.2 39 ZeroCERT

11498 2023-07-16 11:13 gold123.exe  

f63ac0b3496291dbc468e2d5a1f2bcd5


RedLine Infostealer RedLine stealer UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 2 7.4 51 ZeroCERT

11499 2023-07-16 11:11 clip64.dll  

c0973231287f23e7cf3e8335a031bb8d


UPX Admin Tool (Sysinternals etc ...) Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 58 ZeroCERT

11500 2023-07-16 11:11 texaszx.exe  

562befbabd86d628aa650b58d5b0f97a


AgentTesla .NET framework(MSIL) PWS KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 10.4 29 ZeroCERT

11501 2023-07-16 11:09 damianozx.exe  

1713d3d96339f9983809739473cbef08


AgentTesla .NET framework(MSIL) PWS KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 10.8 44 ZeroCERT

11502 2023-07-16 11:09 damianozx.doc  

cff9ecbc256c9828f1e9ea683bc5ea31


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself IP Check Tofsee Windows Exploit DNS crashed 		1 3 7 5.0 35 ZeroCERT

11503 2023-07-16 11:07 95.214.25.232:3004  

fa0e45413ffcfb619ab488952c7d4cf3


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB Remote Code Execution 		1.8 29 ZeroCERT

11504 2023-07-16 11:07 Inv_LCC_Scan_4.exe  

01f50ef4b9419013f3a3967d7ed734cf


UPX OS Processor Check PE64 PE File VirusTotal Malware Malicious Traffic unpack itself 		1 2 2.4 17 ZeroCERT

11505 2023-07-16 11:06 divinezx.exe  

7565de937291fdf2f686f518f1b16fa5


AgentTesla Generic Malware .NET framework(MSIL) Antivirus KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 2 15.0 51 ZeroCERT

keyword