popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12136 2021-09-07 09:50 https://mail.hoteloscar.in/ima...  

7546581523b86a9d2b4e60254573e57c


AntiDebug AntiVM PNG Format MSOffice File JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 4.2 ZeroCERT

12137 2021-09-07 10:16 http://mail.hoteloscar.in/imag...  

bba2051c265239a1e1c303da381b316f


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 2 4.2 ZeroCERT

12138 2021-09-07 11:20 reestr.exe  

e369a4ae59ce3b82b5ed8054f0597341


Malicious Packer PE File PE32 VirusTotal Malware 		2.2 M 48 r0d

12139 2021-09-07 11:42 1.html  

7546581523b86a9d2b4e60254573e57c


AntiDebug AntiVM Code Injection RWX flags setting unpack itself Windows utilities Windows 		2.2 M ZeroCERT

12140 2021-09-07 11:42 1.html  

b158eeca25cafb1c4f708acc3a3e4124


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 M ZeroCERT

12141 2021-09-07 11:44 kayzx.exe  

a23fe7df14ede5c0b9f51cbd58bcd27b


Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		4.6 M 18 ZeroCERT

12142 2021-09-07 11:45 frundll32.exe  

0425240f08e4a9d06e77a32f3f3b4ab7


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW Tofsee ComputerName 		2 1 3.8 M 18 ZeroCERT

12143 2021-09-07 11:57 clr.exe  

be8b9976bbf090bc23facc50a90273d6


NPKI Generic Malware UPX Malicious Library Malicious Packer PE File PE64 VirusTotal Malware unpack itself DNS 		4 2.6 28 ZeroCERT

12144 2021-09-07 11:57 ojbabas.exe  

04980596d66951166fa2ebfd96c84d22


PE File OS Processor Check PE32 VirusTotal Malware unpack itself Tofsee crashed 		1 2 2 1.4 M 26 ZeroCERT

12145 2021-09-07 12:00 proliv6.exe  

ef5b5d09bfd51074604ec0c622ad7052


Generic Malware Themida Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 3 1 9.8 M ZeroCERT

12146 2021-09-07 12:01 wef.exe  

9008f0b5ea0867bbeda8161d183e7a3d


RAT PWS .NET framework Generic Malware Malicious Library PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself DNS 		5 4.4 M 50 ZeroCERT

12147 2021-09-07 12:02 SmartPDF.exe  

5578b9ee762d52576c11b01f004fc6ad


Gen2 RAT Emotet Gen1 Generic Malware UPX Malicious Library Malicious Packer Antivirus PE File PE32 OS Processor Check DLL .NET EXE PE64 MSOffice File VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW IP Check VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName Amazon DNS 		14 33 8 2 14.6 M 22 ZeroCERT

12148 2021-09-07 12:21 3cc0e0be954dc849581f9ff1817647...  

adfe31c40569ca5b0b403f0ba3f7b24c


Gen2 Gen1 Generic Malware Malicious Library PE File OS Processor Check PE32 DLL VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion IP Check ComputerName 		3 9 1 1 8.4 M 51 ZeroCERT

12149 2021-09-07 14:38 Purchase Inquiry.ppt  

72fbb1892420f4727710ea0f7a324834


Generic Malware VBA_macro MSOffice File VirusTotal Malware RWX flags setting unpack itself Tofsee 		1 2 1 1.6 26 ZeroCERT

12150 2021-09-07 14:59 faster4upusa.exe  

9eff1fa203474d2c90d490415fd380c9


PE File PE64 VirusTotal Malware crashed 		1.4 M 13 r0d

keyword