popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11896 2023-06-28 16:58 thirdagodzx.doc  

6a4d531095c70f0e45a6b9cc33be39d0


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash Windows Exploit DNS crashed 		3 5 6 1 4.0 M 29 ZeroCERT

11897 2023-06-28 16:45 Bar0627SetUp.exe  

e55683d061bb823c5ad9828c506f8c54


RedLine stealer Themida Packer UPX Admin Tool (Sysinternals etc ...) Socket DNS Anti_VM AntiDebug AntiVM .NET EXE PE32 PE File PNG Format PE64 JPEG Format Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder VMware anti-virtualization installed browsers check Tofsee Interception Stealer Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		13 13 4 20.4 M 22 ZeroCERT

11898 2023-06-28 16:42 thirdagodzx.exe  

03edaee7120cbf2752ae82e5eed3f5ba


.NET framework(MSIL) .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 42 ZeroCERT

11899 2023-06-28 16:40 thirdagodzx.doc  

6a4d531095c70f0e45a6b9cc33be39d0


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit DNS crashed 		3 4.6 M 29 ZeroCERT

11900 2023-06-28 16:39 Lyla0627SetUp.exe  

7a239c74c129efc307f98fd62a605bca


RedLine stealer Themida Packer UPX Admin Tool (Sysinternals etc ...) Socket DNS Anti_VM AntiDebug AntiVM .NET EXE PE32 PE File PNG Format PE64 JPEG Format Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder suspicious TLD VMware anti-virtualization installed browsers check Tofsee Interception Stealer Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		13 13 4 20.8 M 23 ZeroCERT

11901 2023-06-28 16:37 Dhl Docs6272023.doc  

5f62b3558fcff678c7e3af65eea16c5d


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash IP Check Tofsee Windows Gmail Exploit DNS crashed 		2 5 7 4.8 29 ZeroCERT

11902 2023-06-28 16:36 pmexzx.exe  

702afdca8f01b2e8cca517d70c86afb4


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 14.0 M 41 ZeroCERT

11903 2023-06-28 16:34 kudizx.exe  

d884898752a809e39203f30207e8b0c7


Formbook .NET framework(MSIL) PWS KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		4 4 13.8 M 47 ZeroCERT

11904 2023-06-28 16:33 chamberszx.exe  

f2707d788cc86c8707eee04679ddf651


.NET framework(MSIL) .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 43 ZeroCERT

11905 2023-06-28 14:57 File_pass1234.7z  

a391d1c7127c4d323d110d325a8ad4fd


Redline Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows DNS 		26 60 26 14 6.6 M ZeroCERT

11906 2023-06-28 09:24 24_06.zip  

ad691fbd485d94a8fae1a008b081ec80


ZIP Format VirusTotal Malware Malicious Traffic NetSupport 		3 4 3 1.4 M 16 ZeroCERT

11907 2023-06-28 09:21 0loader_p1_dll_64_n1_x64_inf.d...  

dbf161014034d9a8154eb91e81c6c88d


UPX OS Processor Check DLL PE64 PE File VirusTotal Malware PDB Checks debugger crashed 		1.8 M 23 ZeroCERT

11908 2023-06-28 08:02 NEV.exe  

01248782c871923cce056480ce946ab7


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Downloader Google Chrome User Data Confuser .NET Create Service Socket Escalate priviledges PWS Sniff Audio DNS ScreenShot Internet API KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS keylogger 		1 10.2 M 47 ZeroCERT

11909 2023-06-28 07:59 nanobtd.exe  

20b05ef6a9a219260ba6a0603687db86


Generic Malware Confuser .NET PE64 PE File VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger unpack itself 		5.4 M 49 ZeroCERT

11910 2023-06-28 07:57 new_project.exe  

614a31f01a52c3c9a5819a7962e45c12


.NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger Creates shortcut unpack itself ComputerName DNS 		1 3.0 M 5 ZeroCERT

keyword