popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12016 2023-06-22 17:40 1099-MISC.jar  

c1a10e84f73f716c09b346ff4208b39e


ZIP Format VirusTotal Malware AutoRuns Check memory Checks debugger RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process Windows DNS crashed 		1 4.4 18 guest

12017 2023-06-22 17:39 photo085.exe  

c3f6bfa5ad67642e7c540b458c375fbf


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE File PE32 DLL CAB Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName DNS Cryptographic key Software crashed 		3 2 10 3 15.8 M 29 ZeroCERT

12018 2023-06-22 17:36 bira.exe  

812117b53cdcb42545bf29d4de9c250e


UPX .NET framework(MSIL) Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 6.2 M 50 ZeroCERT

12019 2023-06-22 17:36 cleanmgrse.exe  

b1a48b37d6eae92a63c51f1a6a26f604


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 M 51 ZeroCERT

12020 2023-06-22 17:34 44yQ9dcOIkFHUOt.exe  

a7498599d114b42b2deba2b694f65eca


UPX .NET framework(MSIL) OS Processor Check .NET EXE PE File PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Browser Email ComputerName crashed 		5.2 M 53 ZeroCERT

12021 2023-06-22 17:34 sdesdesdesdsesdfsdfefsfsdssdse...  

eecdb787bdf7328b2ebcdc0ab2751e7b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		3.0 M 28 ZeroCERT

12022 2023-06-22 14:19 File_pass1234.7z  

925bad98f5262b9221631e9a52312aa1


PWS Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Fabookie Stealer Windows DNS 		21 46 21 11 7.0 M 8 ZeroCERT

12023 2023-06-22 11:13 n0cjd0kc.exe  

f09c7cd38fbc8b59264301db9c2d3991


Generic Malware UPX Malicious Library Antivirus AntiDebug AntiVM OS Processor Check PE File PE32 PowerShell VirusTotal Malware Microsoft Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process WriteConsoleW IP Check Windows ComputerName DNS Cryptographic key crashed 		3 5 2 1 12.8 M 51 ZeroCERT

12024 2023-06-22 11:10 123.exe  

0a37c2dbf12101e1f082e345c76fd594


Browser Login Data Stealer Generic Malware UPX PE File PE32 icon Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger exploit crash unpack itself Check virtual network interfaces installed browsers check Windows Exploit Browser Remote Code Execution Cryptographic key crashed 		8.0 M 56 ZeroCERT

12025 2023-06-22 10:37 qqsrv.exe  

f1bf04ac46c4a9fd55f902d495461147


UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware Remote Code Execution 		1.6 M 48 ZeroCERT

12026 2023-06-22 10:36 postmon.exe  

f7d6bd06f96439787aa170983ab55c3e


Gen2 Generic Malware UPX Malicious Library Malicious Packer Antivirus OS Processor Check PE File PE32 PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Remote Code Execution DNS Cryptographic key 		10 3 1 10.0 48 ZeroCERT

12027 2023-06-22 10:34 debug4.ps1  

01038f84dcf04933d65c1377a99b98a8


Generic Malware Antivirus Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 1 4.6 ZeroCERT

12028 2023-06-22 10:33 debug2.ps1  

d903920d63cbfa12a1f2118ef9c3529d


Generic Malware Antivirus VirusTotal Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 1 5.0 6 ZeroCERT

12029 2023-06-22 10:32 Kaspersky Premium.msi  

7c242798e9aa870339219e2a32540ef7


Gen2 Generic Malware Malicious Library UPX Malicious Packer AntiDebug AntiVM OS Processor Check CAB MSOffice File DLL PE File PE32 Browser Info Stealer VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut exploit crash unpack itself Windows utilities AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Exploit Browser ComputerName crashed 		8.2 17 ZeroCERT

12030 2023-06-22 10:10 3052c15a0e5926da6706d7bc1440d1...  

67b3201085b9b59d58c4a71c8b539bb0


UPX Malicious Library OS Processor Check DLL PE64 PE File VirusTotal Malware PDB Checks debugger unpack itself crashed 		1.4 7 ZeroCERT

keyword