popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12151 2023-06-18 12:16 Pagamento (1).doc  

8c390292fb5916ec70e5c64016675687


PWS VBA_macro Generic Malware task schedule Downloader Antivirus DNS Code injection Sniff Audio ScreenShot KeyLogger AntiDebug AntiVM MSOffice File PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut exploit crash unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Exploit ComputerName Cryptographic key crashed 		1 2 1 10.0 37 ZeroCERT

12152 2023-06-18 12:15 Grey.exe  

5d38aede0d5846ef5637db30b43eca60


PWS .NET framework(MSIL) UPX Confuser .NET OS Processor Check .NET EXE PE32 PE File Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 2 7.4 55 ZeroCERT

12153 2023-06-18 12:15 game.exe  

888983f654ddc26dbba28df2ccef74c0


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Disables Windows Security Windows Update 		4.6 24 ZeroCERT

12154 2023-06-18 09:29 secret_conversations.html  

e57fdf1dad4fabac8ad020453f07cdbb


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 2 3.8 guest

12155 2023-06-17 18:20 cleanmgr.exe  

1680103ba897689ec92f5940e043afb4


NSIS UPX Malicious Library PE32 PE File OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 1 8.2 M 40 ZeroCERT

12156 2023-06-17 18:17 djlw_zip.exe  

90c4d8c8f396f66d9b556ab05344a8cd


Gen1 Emotet PWS .NET framework(MSIL) Malicious Library CAB PE64 PE File .NET EXE PE32 VirusTotal Malware AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself AppData folder Windows ComputerName Remote Code Execution 		4.6 M 40 ZeroCERT

12157 2023-06-17 18:15 maps.exe  

02f7c729e7344aad545091d1bc408658


NSIS UPX Malicious Library PE32 PE File OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 1 8.2 M 44 ZeroCERT

12158 2023-06-17 18:13 steamrepairnet.exe  

77d6c227485a414fd6676dc5a006a9cf


UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File DLL PE32 VirusTotal Malware Malicious Traffic Checks debugger buffers extracted Creates executable files Tofsee 		2 4 1 4.2 4 ZeroCERT

12159 2023-06-17 18:12 chcike.exe  

8ad0291a1dfaf355e5cfea617a747f40


PWS .NET framework(MSIL) UPX Confuser .NET OS Processor Check .NET EXE PE32 PE File Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 6.2 M 53 ZeroCERT

12160 2023-06-17 18:11 cleanmgr.exe  

0556da46f62c3da93a0de233dc1d76a9


NSIS UPX Malicious Library PE32 PE File OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 8.2 M 43 ZeroCERT

12161 2023-06-17 18:10 maps.exe  

622db6be2018e48a527cd178ae2f94b5


NSIS UPX Malicious Library Admin Tool (Sysinternals etc ...) PE32 PE File OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 8.4 M 44 ZeroCERT

12162 2023-06-17 18:09 gate.exe  

4be5a605c895baa84294466875582764


Generic Malware UPX Malicious Library OS Processor Check PE64 PE File Browser Info Stealer Malware download VirusTotal Malware MachineGuid Malicious Traffic Creates executable files unpack itself Disables Windows Security sandbox evasion IP Check PrivateLoader Tofsee Windows Browser DNS 		3 7 5 2 8.6 M 46 ZeroCERT

12163 2023-06-17 18:08 %E5%A4%9A%E5%8A%9F%E8%83%BD.dl...  

cffa65118e7675001f5b61e0def9c1cc


DLL PE32 PE File VirusTotal Malware 		1.4 24 ZeroCERT

12164 2023-06-17 18:07 build.exe  

dc3352babcf165a455d86f015a26b742


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself 		2.2 M 44 ZeroCERT

12165 2023-06-16 19:56 73687129598.pdf  

3fe2c8d84c835b57baf80b2392da473f


PDF Suspicious Link PDF ZIP Format VirusTotal Malware Windows utilities Windows 		5 2.2 29 ZeroCERT

keyword