popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11971 2023-06-26 09:43 File.7z  

a53d02283b3fe9c0007527a8ec64a369


Redline PWS Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware RecordBreaker suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS 		33 50 31 10 6.2 M ZeroCERT

11972 2023-06-26 09:27 cred64.dll  

4bd56443d35c388dbeabd8357c73c67d


Browser Login Data Stealer UPX Malicious Library OS Processor Check DLL PE64 PE File VirusTotal Malware PDB Checks debugger installed browsers check Browser ComputerName crashed 		2.4 M 40 ZeroCERT

11973 2023-06-26 09:22 frutt237.exe  

dabf9d76781534549d9d382ceb71b854


UPX Malicious Library OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications WriteConsoleW installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 6.4 42 ZeroCERT

11974 2023-06-26 09:22 clip64.dll  

49b3faf5b84f179885b1520ffa3ef3da


UPX Malicious Library Admin Tool (Sysinternals etc ...) OS Processor Check DLL PE File PE32 VirusTotal Malware PDB Checks debugger unpack itself 		2.0 53 ZeroCERT

11975 2023-06-26 08:14 AAAd.exe  

3dd072d71907f6d5a5b046908c081f11


Gen1 HermeticWiper Emotet Browser Login Data Stealer Generic Malware Downloader UPX Malicious Library Malicious Packer Antivirus Admin Tool (Sysinternals etc ...) DGA Socket HTTP PWS Http API Internet API Escalate priviledges Anti_VM AntiDebug A Malware download Amadey VirusTotal Malware powershell PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Checks Bios powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW China anti-virtualization VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed Downloader 		21 16 15 10 10.0 M 51 ZeroCERT

11976 2023-06-26 07:59 HCX.exe  

3e1dfc7cfb1d1a466f31dfa4f69e6018


Generic Malware UPX Malicious Library Antivirus PE File PE32 PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		8.6 M 40 ZeroCERT

11977 2023-06-26 07:58 BLUE.exe  

be2ef16c72f19b8af1de903ca869d47c


PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.0 M 35 ZeroCERT

11978 2023-06-26 07:57 FLEX.exe  

f78c8e53c514ce13844541e2d735c9b8


Ave Maria WARZONE RAT Generic Malware UPX Malicious Library Downloader Malicious Packer Antivirus OS Processor Check PE File PE32 Browser Info Stealer Malware download AveMaria NetWireRC VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Check memory buffers extracted WMI Creates executable files unpack itself Windows utilities AntiVM_Disk WriteConsoleW Firewall state off VM Disk Size Check human activity check installed browsers check Windows Browser RAT Email ComputerName Remote Code Execution DNS 		3 2 9.8 M 58 ZeroCERT

11979 2023-06-26 07:56 foto172.exe  

f2d6b9680fb0b9d38268179a0c29af24


Gen1 Emotet Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE OS Processor Check DLL CAB Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 10 3 15.6 M ZeroCERT

11980 2023-06-26 07:53 AAAd1.exe  

94f7dacd5b046eba244fceebe7b9a1dd


Emotet Generic Malware UPX Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 39 ZeroCERT

11981 2023-06-26 07:53 Setup.exe  

d4d1d09cb001fd13a0bbe7f775bb8aa6


Malicious Library Malicious Packer PE File PE32 VirusTotal Malware 		1.4 M 32 ZeroCERT

11982 2023-06-26 07:51 HCX.exe  

3e1dfc7cfb1d1a466f31dfa4f69e6018


Generic Malware UPX Malicious Library Antivirus PE File PE32 PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		8.6 M 40 ZeroCERT

11983 2023-06-26 07:51 1.exe  

ae9e4e404bb0a9ddfda4c71a2f5304eb


UPX Malicious Library OS Processor Check PE File PE32 unpack itself 		1.0 M ZeroCERT

11984 2023-06-26 07:49 test.exe  

ba43067146c6f4e833dbf56b6c8a6a19


PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2 3.8 M 53 ZeroCERT

11985 2023-06-26 07:49 IE_Global.exe  

6b90959b8fe28679025b61b5cdae040b


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 9.0 M 49 ZeroCERT

keyword