popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12106 2023-06-20 09:36 sn.exe  

1a3c1fc575e887613a939ac922be008e


Generic Malware UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		2.2 M 49 ZeroCERT

12107 2023-06-20 09:29 wp-admin.php  

0ed12af50c4a344bc3f1466048f58c39

Check memory 		0.2 guest

12108 2023-06-20 09:19 Amadey_SC.bat  

555b0d888a0bafb00f76527b6c264962


PWS Downloader Create Service DGA Socket DNS Steal credential Code injection HTTP Sniff Audio Http API Internet API ScreenShot Escalate priviledges P2P FTP KeyLogger AntiDebug AntiVM suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.0 ZeroCERT

12109 2023-06-20 09:19 bqn1kx9furd80.exe  

f8f90dde30c804bc48218e20ccec81bc


RedLine stealer UPX Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 1 10.4 24 ZeroCERT

12110 2023-06-20 07:47 SOF.exe  

b559e2f8aa0df6e07429859121702a4c


PWS .NET framework(MSIL) Admin Tool (Sysinternals etc ...) KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 11.2 M 31 ZeroCERT

12111 2023-06-20 07:44 setup.exe  

9a97e9f36c856d7660f1dedd940a7527


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 40 ZeroCERT

12112 2023-06-20 07:44 Bin (2).exe  

b17445243117804a2a0b91906c6e0094


PWS .NET framework(MSIL) Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 4 2 14.0 M 31 ZeroCERT

12113 2023-06-20 07:44 unsecapp.exe  

d295211b783d0ef3be258ab3c84eaf74


Formbook NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder suspicious TLD Windows DNS 		16 20 4 14 6.4 M 37 ZeroCERT

12114 2023-06-20 07:43 loki.exe  

78c56c6fd7ed0ff5c69ec132d61e27b3


NSIS UPX Malicious Library PE File PE32 DLL GIF Format VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself AppData folder Windows crashed 		4.8 M 17 ZeroCERT

12115 2023-06-20 07:40 juneowar2.1.exe  

ec77a84dddf6fef090dde4d2ab3a1007


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Malware download AveMaria NetWireRC VirusTotal Malware AutoRuns MachineGuid Check memory Creates executable files unpack itself AppData folder Windows RAT ComputerName DNS DDNS keylogger 		2 4 5.2 M 39 ZeroCERT

12116 2023-06-20 07:40 chu.exe  

fae26093299f08bf5f0e21ae0a9b4d1e


PWS .NET framework(MSIL) Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself crashed 		2.4 42 ZeroCERT

12117 2023-06-20 07:38 liboshed2.1.exe  

4e13394b41e8d0cf8b1721aabdbfd719


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		1 4 1 4.4 37 ZeroCERT

12118 2023-06-20 07:38 checkdt.exe  

67d6a918fc89a950738fdc5a9e56123b


UPX Malicious Library PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.0 M 20 ZeroCERT

12119 2023-06-20 07:36 EYG.exe  

3d4b36f562038a18fc835188470973c7


NSIS Generic Malware UPX Malicious Library Antivirus PE File PE32 PowerShell JPEG Format VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		8.2 43 ZeroCERT

12120 2023-06-20 07:36 Connector.exe  

e3712d22893f309738fd59d00ced152f


UPX Malicious Library OS Processor Check PE File PE32 Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Malicious Traffic buffers extracted unpack itself Ransomware Browser Remote Code Execution crashed 		1 2 4.8 M 4 ZeroCERT

keyword