popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11776 2023-07-04 18:17 secagodzx.exe  

6b88e856d55691004a431455914a2c99


AgentTesla Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		4 3 13.4 ZeroCERT

11777 2023-07-04 17:56 mazx.doc  

5d392bce63c065860ea2dc900e862c49


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash Windows Exploit DNS crashed 		2 3 6 4.0 M 28 ZeroCERT

11778 2023-07-04 17:53 defounderzx.doc  

5321abc2b59da0447bf1e9ea2505e4d4


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		2 4 7 4.4 M 28 ZeroCERT

11779 2023-07-04 17:50 mazx.exe  

60822680920de27aed07c2352674f05c


Formbook AgentTesla Generic Malware .NET framework(MSIL) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 3 1 10.4 M 40 ZeroCERT

11780 2023-07-04 17:46 mazx.doc  

5d392bce63c065860ea2dc900e862c49


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		3.0 M 28 ZeroCERT

11781 2023-07-04 17:44 secagodzx.doc  

9f3bad3d47d50457a413733647c70844


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		1 1 5 4.4 M 28 ZeroCERT

11782 2023-07-04 17:43 thirdagodzx.doc  

490a968171cec8599699b7a2a0addc2f


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic ICMP traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		2 5 6 5.2 M 27 ZeroCERT

11783 2023-07-04 17:41 defounder.exe  

bbd078b0a1887a7ee952c1b8689f3cc8


Formbook Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 4 1 11.0 M 44 ZeroCERT

11784 2023-07-04 17:41 Ozgkdiw.exe  

2b7acf39186ebd5343bac84ba53dc078


Emotet Hide_EXE Generic Malware Suspicious_Script_Bin task schedule UPX .NET framework(MSIL) Escalate priviledges PWS ScreenShot Anti_VM AntiDebug AntiVM OS Processor Check PE File .NET EXE PE32 Browser Info Stealer Malware download NetWireRC VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Check virtual network interfaces malicious URLs AntiVM_Disk VM Disk Size Check human activity check Tofsee DCRat Windows Browser ComputerName DNS Cryptographic key crashed keylogger 		13 3 2 17.2 18 ZeroCERT

11785 2023-07-04 17:40 chamberzx.doc  

904a7777ae86d1364b590d38cdea2b7b


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Tofsee Windows Exploit DNS crashed 		1 3 7 4.4 M 29 ZeroCERT

11786 2023-07-04 17:38 chamberzx.exe  

c5d36ac423b8a41690cc375a917e044c


AgentTesla Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		3 2 14.0 M 34 ZeroCERT

11787 2023-07-04 17:37 plugmanzx.exe  

7cb796c875cccc9233d82854a4e2fdf0


Client SW User Data Stealer Backdoor RemcosRAT AgentTesla browser info stealer Generic Malware Downloader Google Chrome User Data .NET framework(MSIL) Antivirus Create Service Socket Escalate priviledges PWS Sniff Audio DNS ScreenShot Internet API KeyLogg Remcos VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS keylogger 		1 4 2 12.2 M 32 ZeroCERT

11788 2023-07-04 17:34 RegEdit.exe  

923b2cf57335ee5730c03f793b9b465a


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder Windows 		4 8 1 5.2 M 40 ZeroCERT

11789 2023-07-04 17:33 thirdagodzx.exe  

c183facf14c26cf94a124c3a35c9fae9


Formbook Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 3 1 1 12.0 M 42 ZeroCERT

11790 2023-07-04 16:46 SmokeLoader.exe  

f20e21ecbf3d0ae242be9d441d95e0f0


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		2.2 43 ZeroCERT

keyword