popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11836 2023-07-03 10:36 95.214.25.233:3002  

c38abd8bb4501954e6cec0c28f7550a0


Malicious Library PE File PE32 VirusTotal Malware PDB 		1.8 29 ZeroCERT

11837 2023-07-03 10:09 File.7z  

e1c1631773503c7756e93f28d1a2285b


Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Cryptocurrency Miner Malware Cryptocurrency suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Stealer Windows Remote Code Execution DNS 		19 61 20 7 7.0 M ZeroCERT

11838 2023-07-03 09:44 1.bat  

3e411bd1e848941b8e74434c5800ed2b


LokiBot Gen1 Generic Malware Downloader task schedule UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer Antivirus Create Service Socket DGA Steal credential Escalate priviledges Code injection HTTP PWS Sniff Audio DNS ScreenShot Htt Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS NetSupport 		6 5 3 9.6 ZeroCERT

11839 2023-07-03 09:41 Tqmjx.wav.exe  

e4ae709efa85e943dcc67709581c3444


UPX .NET DLL DLL PE File PE32 		0.4 ZeroCERT

11840 2023-07-03 09:35 Tjfgtxur.dat.exe  

30d4b0c32df42140933951fd53c41b53


UPX .NET DLL DLL PE File PE32 		0.4 ZeroCERT

11841 2023-07-03 09:35 Ibmxhexusx.pdf.exe  

1b8adba2e1058d36ced89a3b3efb6e5d


UPX .NET DLL DLL PE File PE32 		0.4 ZeroCERT

11842 2023-07-03 09:35 Akisikttvm.dat.exe  

6eeee2f35e8b6d872c517e5dbdc13067


UPX .NET DLL DLL PE File PE32 		0.4 ZeroCERT

11843 2023-07-01 12:41 lwg67u9jwvf.exe  

972abf3179291dfac99397b5ae996365


Gen1 UPX Malicious Library Malicious Packer HTTP PWS ScreenShot Http API Internet API AntiDebug AntiVM OS Processor Check PE File PE32 DLL Browser Info Stealer Malware download VirusTotal Malware RecordBreaker Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Stealer Windows Browser DNS crashed 		9 1 11 12.6 M 28 ZeroCERT

11844 2023-07-01 12:39 c53cfff621a84792162f70e790980e...  

7f6638a6d92964abac556675bb6b669d


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 57 ZeroCERT

11845 2023-07-01 12:34 F-VPN.exe  

7106aab423db77a92c6e97a70bc8ef84


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 PE64 VirusTotal Malware PDB Code Injection Creates executable files ComputerName Remote Code Execution crashed 		4.8 M 21 ZeroCERT

11846 2023-07-01 12:32 rocketpro.exe  

3a7672c0d0002621ffb756afab204616


RedLine stealer UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 2 7.8 33 ZeroCERT

11847 2023-07-01 12:30 bu333ild.exe  

e2ae5ae3318f8ae3111188f4ed7770a6


RedLine stealer UPX .NET framework(MSIL) OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows Cryptographic key 		3.0 58 ZeroCERT

11848 2023-07-01 12:30 4.php  

6b59056d039c885c9cdaea63924a97ef


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.4 34 ZeroCERT

11849 2023-07-01 12:28 7777777.exe  

3de3c62bf07b3cc5179139b99378ce6d


RedLine stealer UPX .NET framework(MSIL) OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 4.2 57 ZeroCERT

11850 2023-07-01 12:23 fb.exe  

402c4df156c38ca61ccb6652d33878fb


RedLine stealer UPX AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 11.0 M 47 ZeroCERT

keyword