popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11551 2023-07-13 11:29 Passw0rdsz_8686_Setup_Full.rar  

265512707cae9867fa087ed8ba84ae4f


Escalate priviledges PWS KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger Creates executable files unpack itself 		2.0 M ZeroCERT

11552 2023-07-13 11:25 File_pass1234.7z  

93c547f9499216b529205c418fb4e7b0


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS Downloader 		25 48 21 10 6.2 M ZeroCERT

11553 2023-07-13 11:19 b.jpg.vbs  

92589da336f8a80a34a764cb763c7e01


Hide_EXE VirusTotal Malware crashed 		0.8 M 11 ZeroCERT

11554 2023-07-13 09:09 imgengine.dll  

511f56b74826a4e053db05e34f72bd6b


UPX OS Processor Check MZP Format DLL PE File PE32 VirusTotal Malware Checks debugger WMI RWX flags setting unpack itself Check virtual network interfaces Tofsee ComputerName crashed 		1 3 1 4.0 15 ZeroCERT

11555 2023-07-13 09:06 imgengine.dll  

511f56b74826a4e053db05e34f72bd6b


UPX OS Processor Check MZP Format DLL PE File PE32 VirusTotal Malware Checks debugger WMI RWX flags setting unpack itself Check virtual network interfaces Tofsee ComputerName crashed 		1 3 1 4.0 15 ZeroCERT

11556 2023-07-13 09:00 vaferias.png  

922605e4469c97bcfd19b2ae07d18464


ZIP Format VirusTotal Malware 		0.6 10 ZeroCERT

11557 2023-07-13 09:00 SHIPPING_COPY_DOCUMENTS-QRYTR-...  

0bbe430413435af44cd3af7dd542d158


Generic Malware Antivirus Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Windows utilities suspicious process Windows ComputerName DNS Cryptographic key crashed 		1 1 8.6 ZeroCERT

11558 2023-07-13 08:58 Forrderes.exe  

ceaf606490044679c681b1cae6f67bd0


UPX Malicious Library PE File PE32 DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.6 32 ZeroCERT

11559 2023-07-13 07:28 wins.exe  

da4dd59a4f7d449bb43fe614c762ae38


AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		11 12 2 9.0 M 16 ZeroCERT

11560 2023-07-13 07:27 logszx.doc  

9efc5bf89911efa2f7c3e6eb52313b24


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		1 3 6 5.2 M 32 ZeroCERT

11561 2023-07-13 07:25 contactzx.doc  

79055da8c7237e6101b284018ab23880


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware AgentTesla Malicious Traffic ICMP traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		1 4 7 7.4 M 32 ZeroCERT

11562 2023-07-13 07:24 logszx.exe  

ebf3233ae74cc600e4c41f2454be000f


.NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed 		2 1 11.4 M 33 ZeroCERT

11563 2023-07-13 07:20 contactzx.exe  

b8c4c01af54105fef68157252a11bb69


.NET framework(MSIL) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.4 M 32 ZeroCERT

11564 2023-07-13 07:18 updEdge.exe  

3c55617e6b69330386a0350e9f6aa0b4


Themida Packer Generic Malware UPX Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI ICMP traffic unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Stealer Windows Browser ComputerName Firmware Cryptographic key Software crashed 		2 2 15.4 29 ZeroCERT

11565 2023-07-13 07:18 csrssop.exe  

11cf36796a468db2f1789d06d01a65f4


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 14.2 32 ZeroCERT

keyword