popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11926 2023-06-28 07:30 AA.exe  

e6b09f1c7473e375eccf56221de26cc9


PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 3 12.8 M 55 ZeroCERT

11927 2023-06-28 07:28 bird.exe  

c441075240de1a6f57d05dcae26969f3


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Downloader Google Chrome User Data Confuser .NET Create Service Socket Escalate priviledges PWS Sniff Audio DNS Internet API KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself WriteConsoleW Windows 		8.6 M 58 ZeroCERT

11928 2023-06-28 07:28 rh1.exe  

af1efddb3afaf3bf4d121a9d4c7e7d68


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware WMI RWX flags setting unpack itself ComputerName DNS crashed 		1 4.4 M 41 ZeroCERT

11929 2023-06-28 07:26 data64_2.exe  

11df871909c85e2c2d6ab13b86937749


RedLine stealer UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 1 11.8 26 ZeroCERT

11930 2023-06-28 07:26 Lion.exe  

1cbb726aada6d392c55f2a52113d05eb


UltraVNC UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		6.0 58 ZeroCERT

11931 2023-06-27 20:02 agodzx.doc  

2af4d7d7255cb2e719ade02f0c21a41c


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		4 8 6 4.4 M 29 ZeroCERT

11932 2023-06-27 19:59 hussanzx.exe  

bbd76370ac91e9e7ee832b127afc4d2e


LokiBot Generic Malware Antivirus Socket PWS DNS AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 15.4 M 42 ZeroCERT

11933 2023-06-27 19:57 ansazx.exe  

1d132b7a35d336fc7b2aba2c52346f3f


Formbook Generic Malware Antivirus PWS AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 2 1 11.0 M 40 ZeroCERT

11934 2023-06-27 19:57 pablozx.exe  

40df500e4caa9265ef6bea269c34140d


Formbook Generic Malware .NET framework(MSIL) Antivirus PWS AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		3 6 1 1 11.4 M 48 ZeroCERT

11935 2023-06-27 19:55 agodzx.exe  

8001fc3355e347ebeb82daf3170e884e


NSIS UPX Malicious Library PE32 PE File DLL FormBook Malware download VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder Windows 		3 7 1 5.2 41 ZeroCERT

11936 2023-06-27 19:53 europowerzx.exe  

b39ec4e8104e06705f1eea981c75ebce


Generic Malware Antivirus PWS SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 13.6 M 43 ZeroCERT

11937 2023-06-27 19:53 as.exe  

58c867b6280648039f05f3702e565474


UPX Malicious Library OS Processor Check PE32 PE File Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 6.4 M 52 ZeroCERT

11938 2023-06-27 19:51 ip_network.exe  

5e6ffe8f38644e73dbf42cfc39300028


NSIS UPX Malicious Library PE32 PE File DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.6 M 23 ZeroCERT

11939 2023-06-27 19:51 good.exe  

6cd68ce9a80f20a78a5f1202bb4fa900


NSIS UPX Malicious Library PE32 PE File DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 9.0 M 42 ZeroCERT

11940 2023-06-27 15:18 File_pass1234.7z  

e7dce44fd1c02623719da154a73530b2


Redline Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS 		23 49 21 11 6.2 M 1 guest

keyword