popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11536 2023-07-14 07:44 HHH1.exe  

2e29ca797a270d08c074968bd8c42649


Generic Malware UPX Antivirus AntiDebug AntiVM PE64 PE File OS Processor Check VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Auto service Check virtual network interfaces malicious URLs Tofsee Windows DNS Cryptographic key 		1 3 1 9.4 M 23 ZeroCERT

11537 2023-07-14 07:42 app64.dll  

4aa7e4b29ba9c9c9a44ed8c096758956


Malicious Library DLL PE64 PE File VirusTotal Malware Malicious Traffic Checks debugger Remote Code Execution DNS 		1 2 3.2 M 29 ZeroCERT

11538 2023-07-14 07:40 Ads.exe  

fcb679b0de5f4f8ac6758087df0eea4b


Generic Malware UPX Antivirus ScreenShot KeyLogger AntiDebug AntiVM PE64 PE File OS Processor Check VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Auto service Check virtual network interfaces malicious URLs Tofsee Windows Cryptographic key 		1 2 1 8.8 M 29 ZeroCERT

11539 2023-07-14 07:37 ijijhgijsifjsidjiwjeijijijijif...  

84f81dca8965bec393cdc9af3a564545


MS_RTF_Obfuscation_Objects RTF File doc Vulnerability VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed 		1 1 3 4.4 M 29 ZeroCERT

11540 2023-07-14 07:36 olor.exe  

8dfdbc3a8f598f002a270eefd09b5162


AgentTesla .NET framework(MSIL) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 10.6 M 44 ZeroCERT

11541 2023-07-14 07:35 websm.exe  

e716168756c85d9652baae798f94bdfa


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution DNS 		1 2.8 M 46 ZeroCERT

11542 2023-07-14 07:34 pubmixazed.exe  

4d9408686911e97c20712070a341fe60


Generic Malware UPX Antivirus PE64 PE File OS Processor Check VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Auto service Check virtual network interfaces Tofsee Windows Cryptographic key 		1 2 1 7.8 28 ZeroCERT

11543 2023-07-14 07:33 csrssmd.exe  

af17c05e85e4e33359ccab3e6d4a3de2


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 13.4 M 54 ZeroCERT

11544 2023-07-14 07:32 65.hta  

c424aa5b9e44cdfa876c24c898bd1205


Generic Malware Antivirus Hide_URL VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 M 6 ZeroCERT

11545 2023-07-14 07:31 APSLoader.exe  

751dd472c61b174351d8f98ce5619a7d


SmokeLoader PE File PE32 VirusTotal Malware 		2.2 M 54 ZeroCERT

11546 2023-07-13 18:57 cc.exe  

ebadf0b0222d1fbda47585fee0a067fd


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key crashed 		1 3 10.8 19 ZeroCERT

11547 2023-07-13 18:54 sixlocation.exe  

c210363cbccbc72e12118622bbbc7083


Gen1 Emotet Malicious Library CAB PE64 PE File .NET EXE PE32 VirusTotal Malware AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself AppData folder Windows ComputerName Remote Code Execution 		4.4 15 ZeroCERT

11548 2023-07-13 13:19 File_pass1234.7z  

40058f3b772f34b08e4de41ce5975864


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS Downloader 		24 48 20 10 6.2 M ZeroCERT

11549 2023-07-13 13:18 b.jpg.ps1  

92589da336f8a80a34a764cb763c7e01


Hide_EXE Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 M 11 ZeroCERT

11550 2023-07-13 11:34 File.7z  

a59d6f347f0e85b174d3618a09037237


Escalate priviledges PWS KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.0 M 8 ZeroCERT

keyword