popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11986 2023-06-26 07:47 fotod95.exe  

83737fac22d88dc2efcde05dd1868c5d


Gen1 Emotet Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 OS Processor Check CAB DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 10 3 15.8 M ZeroCERT

11987 2023-06-26 07:46 AAA1d.exe  

ea3c4d4b4fcef4410f25f4f8c58babb5


PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS crashed 		1 2.0 8 ZeroCERT

11988 2023-06-26 07:45 fotod95.exe  

83737fac22d88dc2efcde05dd1868c5d


Gen1 Emotet Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE CAB OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		5 2 13 3 15.6 M ZeroCERT

11989 2023-06-26 07:45 BABYLON.exe  

072428ed08c736d6f81aea71741389b8


UPX Downloader PE File PE32 suspicious privilege unpack itself sandbox evasion human activity check Windows DNS keylogger 		1 5.6 ZeroCERT

11990 2023-06-26 07:42 Qfczuiq.exe  

4ee88295d65b7a6e566d200a1c842801


UPX OS Processor Check PE64 PE File VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		4.6 M 39 ZeroCERT

11991 2023-06-26 07:40 Deep.exe  

131b8279f1ee7a282d8ae1dcf2d51e1b


UPX OS Processor Check PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.4 M 31 ZeroCERT

11992 2023-06-26 07:40 WARZERO.exe  

bfabce83cee13bb8b8d72f5c38e2af65


UPX OS Processor Check PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.8 M 30 ZeroCERT

11993 2023-06-26 07:39 wa.exe  

4a04139d91df7de08a286bfe99cb4303


Ave Maria WARZONE RAT Gen1 Generic Malware UPX Malicious Library Downloader Malicious Packer Antivirus OS Processor Check PE File PE32 DLL PE64 Browser Info Stealer Malware download AveMaria NetWireRC VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Check memory buffers extracted WMI Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk WriteConsoleW Firewall state off VM Disk Size Check human activity check installed browsers check Windows Browser RAT Email ComputerName Remote Code Execution DNS 		3 2 10.6 M 55 ZeroCERT

11994 2023-06-26 07:38 PureLogis2.exe  

0185c909c96a40ed81f64afc897a9b52


UPX OS Processor Check PE64 PE File MachineGuid Check memory Checks debugger unpack itself 		1.4 M ZeroCERT

11995 2023-06-24 13:29 kashef2.1.exe  

77aa11300e110d3934f871a3820dbd12


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		3 7 1 4.4 M 38 ZeroCERT

11996 2023-06-24 13:27 s64.dll  

e66dec71ef0ffbb33127f41b8ab1fe3e


Themida Packer DLL PE64 PE File VirusTotal Malware unpack itself Windows crashed 		2.6 M 26 ZeroCERT

11997 2023-06-24 13:27 sEF8Y16selYCixT.exe  

a51cd19552a652c9059f84649f2455ce


.NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 47 ZeroCERT

11998 2023-06-24 13:25 ojonakon2.1.exe  

eb4ec13e49edaa7b70956780c01e766a


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		4 8 1 4.6 M 40 ZeroCERT

11999 2023-06-24 13:25 festkon2.1.exe  

f14a6c2f0c53470577f1e3a66e34fe64


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		3 7 1 4.6 M 46 ZeroCERT

12000 2023-06-23 16:53 File_pass1234.7z  

517df90c3607b04503a88799117744de


PWS Escalate priviledges KeyLogger AntiDebug AntiVM Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee DNS 		5 13 9 2 5.4 M 8 ZeroCERT

keyword