popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12091 2023-06-20 17:39 lsass.exe  

2f570584d844c86b86f47a5492d2aed6


UPX Malicious Library PE File PE32 PNG Format DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		3.2 M 50 ZeroCERT

12092 2023-06-20 17:38 lsass.exe  

fa24b7c4c3dc0c6d0b942eb96e4f18a0


Formbook NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		21 24 3 16 5.6 M 50 ZeroCERT

12093 2023-06-20 17:36 DaHost.exe  

0698733d4fc9fd6f54059550dbd86211


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 32 ZeroCERT

12094 2023-06-20 17:36 lsass.exe  

af391ee598dcad6563b79a84a3976215


Formbook NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		20 24 3 16 5.6 M 45 ZeroCERT

12095 2023-06-20 17:35 bluesubstantialie64.exe  

2bd2470d90bd8de8e260ff88a3fb181b


Gen1 Emotet UPX Malicious Library CAB PE64 PE File .NET EXE PE32 VirusTotal Malware AutoRuns PDB MachineGuid Check memory Checks debugger Creates executable files unpack itself AppData folder Windows ComputerName Remote Code Execution 		4.6 18 ZeroCERT

12096 2023-06-20 17:34 2023_vp.exe  

acd82a80283bd3d7b39141dfcc2d5849


UPX Malicious Library Downloader OS Processor Check MZP Format PE File PE32 VirusTotal Malware unpack itself Tofsee Remote Code Execution 		2 3 2.2 M 27 ZeroCERT

12097 2023-06-20 17:33 Service64.exe  

c845efe0b7345f8a3bcfa5f7a5681b9b


UPX Malicious Library Malicious Packer Socket KeyLogger AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Code Injection Check memory buffers extracted sandbox evasion WriteConsoleW Stealer Browser Email DNS Software 		1 1 8.8 M 39 ZeroCERT

12098 2023-06-20 17:33 ageelectronicie32.exe  

482df2c11dc09fe2bdafae64e2edec32


Gen1 Emotet UPX Malicious Library CAB PE File PE32 VirusTotal Malware AutoRuns PDB MachineGuid Check memory Checks debugger Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName Remote Code Execution 		4.4 34 ZeroCERT

12099 2023-06-20 17:32 jeffilesfe.exe  

3221fe4bb3e02d4a03166e83db5fafa2


UPX Malicious Library Downloader OS Processor Check MZP Format PE File PE32 VirusTotal Malware unpack itself Tofsee Remote Code Execution 		1 2 3 2.4 M 30 ZeroCERT

12100 2023-06-20 17:32 DaHost.exe  

a048d50c92a80b789d2f68ff061376e1


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 8.2 M 42 ZeroCERT

12101 2023-06-20 17:30 vp2023.exe  

991688eee333cc4d5a0f0b31e6335854


UPX Malicious Library Downloader OS Processor Check MZP Format PE File PE32 VirusTotal Malware unpack itself Tofsee Remote Code Execution 		1 2 3 2.0 15 ZeroCERT

12102 2023-06-20 09:47 File_pass1234.7z  

228119ee4c65cb1007f6a059d9b9ea04


PWS Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Glupteba VirusTotal Malware c&c Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Fabookie Stealer Windows Discord Browser Trojan DNS Downloader plugin GCleaner 		50 79 48 13 7.6 M 8 ZeroCERT

12103 2023-06-20 09:38 game1.exe  

1a79aed033b7b222da1bfa1840ceace8


Generic Malware UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		2.2 M 53 ZeroCERT

12104 2023-06-20 09:37 exclusion and run rat.bat  

195ea5d64645f606cc382a43e1a5023c


PWS Generic Malware Downloader Antivirus UPX Malicious Library Admin Tool (Sysinternals etc ...) Create Service DGA Socket DNS Steal credential Code injection HTTP Sniff Audio Http API Internet API ScreenShot Escalate priviledges P2P FTP KeyLogger AntiDe Malware download Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed Downloader 		1 1 8 1 9.4 M ZeroCERT

12105 2023-06-20 09:36 mokkshk.vbs  

0cdf35374e4c56f3d0beaa3a449e5c8d


Antivirus VirusTotal Malware WMI ComputerName DNS 		1 4.6 M 18 ZeroCERT

keyword