popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12001 2023-06-23 10:49 File_pass1234.7z  

517df90c3607b04503a88799117744de


Redline PWS Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS 		29 53 24 17 7.0 M ZeroCERT

12002 2023-06-23 10:34 File_pass1234.7z  

e2ac211f43a2b29f42900b1fba935a42


Redline PWS Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey VirusTotal Malware Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS Downloader 		30 54 27 15 7.4 M 9 ZeroCERT

12003 2023-06-23 10:11 sdesdesdesdsesdfsdfefsfsdssdse...  

eecdb787bdf7328b2ebcdc0ab2751e7b


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash Windows Exploit DNS crashed 		1 1 5 4.0 M 28 ZeroCERT

12004 2023-06-23 09:19 lim.php  

6a956b7342f7fbf9f65a969462e85772


Malicious Library DLL PE64 PE File Checks debugger crashed 		0.8 M ZeroCERT

12005 2023-06-23 09:19 sqlite3.dll  

e53d7ba028f3df8918c7447db0e05df8


UPX Malicious Library ASPack OS Processor Check DLL PE File PE32 VirusTotal Malware Checks debugger unpack itself 		2.0 M 13 ZeroCERT

12006 2023-06-23 09:17 vodka.dat  

48765724de7c28a9e74eebf2d8feb11f


UPX DLL PE File PE32 Check memory Checks debugger unpack itself crashed 		1.4 ZeroCERT

12007 2023-06-23 09:17 vodka.dat  

ede982f454787f5b0a24bb370dfbf296


UPX DLL PE File PE32 Check memory Checks debugger unpack itself crashed 		1.4 ZeroCERT

12008 2023-06-23 07:36 203decdty8ubl2.exe  

eef19a1ded4b055516ed0979afa0ad98


UPX Malicious Library ScreenShot AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted WMI RWX flags setting unpack itself WriteConsoleW ComputerName DNS crashed 		1 9.8 31 ZeroCERT

12009 2023-06-23 07:34 kard.exe  

86113f7629e68d99871c23161184a003


UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware Telegram MachineGuid Malicious Traffic Check memory Tofsee ComputerName DNS 		3 5 3 1 4.4 M 57 ZeroCERT

12010 2023-06-23 07:32 pirat.exe  

d55dd4e79ced52edcbcf5603db6f91af


UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware Telegram MachineGuid Malicious Traffic Check memory Tofsee ComputerName DNS 		3 5 3 1 4.4 M 55 ZeroCERT

12011 2023-06-23 07:31 IqXYLXKzl6.exe  

076569d51c616ec2446a2e6b85205764


PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		1.6 28 ZeroCERT

12012 2023-06-22 19:36 https://www.itsapi.top  

9ea57b22677bef51eadaafdc317cbc00


PWS Downloader Create Service DGA Socket DNS Steal credential Hijack Network Code injection HTTP Sniff Audio Http API Internet API ScreenShot Escalate priviledges P2P persistence FTP KeyLogger AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs suspicious TLD Tofsee Windows Exploit DNS crashed 		1 3 3 4.6 guest

12013 2023-06-22 17:45 soft.exe  

fb374beeac9dbd0ce642063538e54cc6


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 3 1 9.4 M 39 ZeroCERT

12014 2023-06-22 17:43 chamberszx.exe  

64928914be4ab456e1121004c886e8ba


PWS .NET framework(MSIL) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 2 11.8 M 27 ZeroCERT

12015 2023-06-22 17:41 .NetFramework.exe  

b8bee86a938a8b2245aa9343077958a6


Formbook UltraVNC UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		8 11 3 9.6 M 29 ZeroCERT

keyword