popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12046 2023-06-21 16:06 vp2023.exe  

38bd8cf9d900fa629d1844b215a3d4d0


UPX Malicious Library MZP Format PE File PE32 VirusTotal Malware unpack itself Tofsee 		1 2 3 1.8 11 ZeroCERT

12047 2023-06-21 16:06 unsecapp.exe  

297c423d2a4a52a7f109240ae70b4ca1


Formbook NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder Windows DNS 		17 19 4 16 5.6 M 42 ZeroCERT

12048 2023-06-21 16:02 data64_2.exe  

2d1dffc690133c02a27ac0e2d7c03039


RedLine stealer UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 1 11.6 M 32 ZeroCERT

12049 2023-06-21 16:00 ss41.exe  

91670b685d544cc5ee1ca6263dc76a53


Gen1 Gen2 Generic Malware UPX Malicious Packer PE64 PE File Browser Info Stealer Malware download VirusTotal Malware PDB suspicious privilege Malicious Traffic WMI unpack itself Windows utilities Check virtual network interfaces WriteConsoleW Fabookie Windows Browser ComputerName Remote Code Execution 		3 4 1 3 4.8 M 4 ZeroCERT

12050 2023-06-21 15:58 data64_3.exe  

6375b46cec76be55885593736cd40270


Themida Packer UPX Anti_VM .NET EXE PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself Checks Bios Detects VMWare Check virtual network interfaces AppData folder suspicious TLD VMware anti-virtualization Tofsee Windows Remote Code Execution Firmware crashed 		3 6 1 9.2 35 ZeroCERT

12051 2023-06-21 15:55 3.exe  

68749e1f05472d28f9aead6c393da9d2


Schwerer UPX PE File PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware Check memory Checks debugger Creates executable files unpack itself suspicious process AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Browser Email ComputerName 		6.8 34 ZeroCERT

12052 2023-06-21 15:55 FRE.exe  

d30ce8e717936e2c8bbd79773807ddd5


UPX Admin Tool (Sysinternals etc ...) KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 12.4 40 ZeroCERT

12053 2023-06-21 15:53 obizx.exe  

718d4c3b29a705405b2377005f53b631


PWS UPX .NET framework(MSIL) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 2 1 12.4 24 ZeroCERT

12054 2023-06-21 15:52 DaHost.exe  

dabf4bf05dadea76f0a7b346eee48844


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 41 ZeroCERT

12055 2023-06-21 15:51 DaHostss.exe  

c5e31856527c65df6382fbc50deb1ded


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 8.6 22 ZeroCERT

12056 2023-06-21 14:42 payload2.dll  

f249ab6266b09f71f05c85a966f8f3d7


AsyncRAT UPX .NET framework(MSIL) Malicious Library Malicious Packer OS Processor Check .NET EXE PE File PE32 VirusTotal Malware DNS DDNS 		2 1 2.6 60 r0d

12057 2023-06-21 14:38 payload2.dll  

f249ab6266b09f71f05c85a966f8f3d7


.NET framework(MSIL) AsyncRAT UPX Malicious Library Malicious Packer OS Processor Check .NET EXE PE File PE32 VirusTotal Malware DNS DDNS 		2 1 2.6 60 r0d

12058 2023-06-21 13:11 File_pass1234.7z  

925bad98f5262b9221631e9a52312aa1


PWS Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware Microsoft Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Fabookie Stealer Windows Trojan DNS 		34 71 37 18 6.2 M ZeroCERT

12059 2023-06-21 12:25 xmrig.exe  

0b021b93052fed386a4d094edae61ca8


Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware unpack itself ComputerName 		1.8 53 ZeroCERT

12060 2023-06-21 12:25 WatchDog.exe  

4aa5e32bfe02ac555756dc9a3c9ce583


.NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself ComputerName 		3.6 M 47 ZeroCERT

keyword