popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11821 2023-07-03 11:16 14013878658799951837.bin  

cf5bca52109e8952fb47b0b7cbb0b148


Gen1 UPX Malicious Library OS Processor Check PE File PE32 unpack itself Windows utilities WriteConsoleW Windows ComputerName crashed 		2.4 M ZeroCERT

11822 2023-07-03 11:14 g.exe  

d3ea7d6746f35904fd821dbdd9883e08


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.4 M 31 ZeroCERT

11823 2023-07-03 11:00 Passw0rd_1122_To_Open_Archive....  

2b3d3bcf435c1400b8a85945d6fe2d15


Escalate priviledges PWS KeyLogger AntiDebug AntiVM Malware download Malware RecordBreaker suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Stealer Windows DNS Downloader 		11 3 15 3.8 M ZeroCERT

11824 2023-07-03 10:52 fotod45.exe  

5aec2b6124e5e88c393e67f578338eff


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE File PE32 CAB DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 11 3 16.2 M 37 ZeroCERT

11825 2023-07-03 10:50 foto175.exe  

af5bf582ca4bbeed9781ae86775f0db6


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE File PE32 .NET EXE DLL CAB Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 10 3 16.8 M 38 ZeroCERT

11826 2023-07-03 10:47 Dll1.dll  

ffdd3195aa485d0d40b4f117a415afc0


UPX OS Processor Check DLL PE File PE32 VirusTotal Malware PDB 		1.6 M 41 ZeroCERT

11827 2023-07-03 10:45 g.exe  

a87285233af602f80c067f2a45897389


Malicious Library PE File PE32 PDB unpack itself DNS 		1 2.0 M ZeroCERT

11828 2023-07-03 10:45 fotod45.exe  

d356793a5ac96f386bbf5b1891a00464


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE File PE32 DLL CAB Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 10 3 16.2 M 37 ZeroCERT

11829 2023-07-03 10:43 Lowes.exe  

15ffe14a177ee7b6327370e89b027cbb


UPX Malicious Library OS Processor Check PE File PE32 Check memory Tofsee Remote Code Execution 		2 2 0.4 M ZeroCERT

11830 2023-07-03 10:43 foto175.exe  

e6b26ffa3c4e3b0d9382c578b3136483


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE File PE32 CAB DLL .NET EXE Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 10 3 15.8 M ZeroCERT

11831 2023-07-03 10:41 photo230.exe  

535bee03acddc2ef19f532f8c53db308


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer OS Processor Check PE File PE32 CAB DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 11 3 16.4 M 36 ZeroCERT

11832 2023-07-03 10:41 nmcn.exe  

9c66d28e37853ca1e2481acc88691743


PE64 PE File VirusTotal Malware PDB MachineGuid Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Cryptographic key crashed 		1 3 1 4.0 M 45 ZeroCERT

11833 2023-07-03 10:40 File_pass1234.7z  

8161084437581de1c90b00a7962c7e6a


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Cryptocurrency Miner Malware Cryptocurrency suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Stealer Windows Remote Code Execution Trojan DNS Downloader 		19 60 22 9 7.0 M ZeroCERT

11834 2023-07-03 10:40 photo270.exe  

4f3cb2d446bbe7ecb9053e974c76503e


Gen1 Emotet SmokeLoader UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE File PE32 CAB DLL .NET EXE Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed Downloader 		6 3 15 3 17.4 M ZeroCERT

11835 2023-07-03 10:38 w-11.exe  

a4f5f1769e9bfd6c4510d7b73aa3332f


UPX PE File PE32 VirusTotal Malware WriteConsoleW 		3.0 M 47 ZeroCERT

keyword