popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12181 2023-06-16 07:31 Srveises.exe  

863359773158308ac17b5340a3b76242


Malicious Library PE64 PE File Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency Malicious Traffic Windows DNS CoinMiner 		1 4 4 2.4 22 ZeroCERT

12182 2023-06-16 07:30 data64_3.exe  

819ebb36bf053ef2d41eec6fc3433e0e


Themida Packer UPX Anti_VM .NET EXE PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself Checks Bios Detects VMWare Check virtual network interfaces AppData folder suspicious TLD VMware anti-virtualization Tofsee Windows Remote Code Execution Firmware crashed 		3 6 1 9.0 28 ZeroCERT

12183 2023-06-16 07:28 data64_2.exe  

cdfefc725e90c867095fd13a040b684f


RedLine stealer[m] Emotet RAT UPX AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 1 11.8 M 24 ZeroCERT

12184 2023-06-15 17:36 de2fd62fafe61f46ad967c84dd7fbc...  

f282875b9958bd3706f9063bf8c5bf14


VBA_macro Generic Malware MSOffice File VirusTotal Malware unpack itself 		2.0 28 ZeroCERT

12185 2023-06-15 17:33 List of Compromised Systems.xl...  

fa595637dcb1d0dbaa41e928b1e59064


Downloader VBA_macro Generic Malware PWS[m] KeyLogger ScreenShot AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection unpack itself 		2.8 25 ZeroCERT

12186 2023-06-15 17:14 build.exe  

d0b2f2f7a2287a11dd92ef89e792a41e


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.0 M 28 ZeroCERT

12187 2023-06-15 16:11 新しいプロジェクトのリクエスト.exe...  

1d8a14663c67671a02af59df183eb3b1


PWS .NET framework RAT UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		10 9 2 11.6 22 guest

12188 2023-06-15 14:44 LUK.exe  

8f488bf3643183b3e0eddfb0ee888083


NSIS Generic Malware UPX Malicious Library Antivirus PE File PE32 PowerShell JPEG Format VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		8.0 M 34 ZeroCERT

12189 2023-06-15 14:44 main.exe  

5c2176e209f257ce5f965f5b6c50af96


UPX Malicious Library Malicious Packer Antivirus Anti_VM OS Processor Check PE64 PE File VirusTotal Malware unpack itself crashed 		1.8 11 ZeroCERT

12190 2023-06-15 14:44 spyr1xx_crypted_LAB.exe  

25a9ce88fcac81aa271bbb34cedb1766


RedLine stealer[m] UPX Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications WriteConsoleW installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 1 9.8 28 ZeroCERT

12191 2023-06-15 14:14 CalculationOfCosts-2055199829....  

c480781f3fcfacd9d3794cb2a384854d

unpack itself crashed 		0.6 ZeroCERT

12192 2023-06-15 14:11 DZQCirIAcHMmDb.js  

63fd837c2148074ef5d675f8f4158433

VirusTotal Malware unpack itself crashed 		1.0 2 ZeroCERT

12193 2023-06-15 14:02 460.docx  

38c51f84ed618dfeeeb9855f21f8415f


Doc XML Downloader ZIP Format Word 2007 file format(docx) VirusTotal Malware exploit crash unpack itself suspicious TLD Exploit crashed 		2 3.6 7 ZeroCERT

12194 2023-06-15 13:25 Rboat.exe  

55f0225d58585d60d486a3cc7eb93de5


PE64 PE File VirusTotal Malware crashed 		2.0 46 guest

12195 2023-06-15 11:03 File_pass1234.7z  

5d8247884739dbfa2355697f29dff1e5


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows Trojan DNS Downloader 		19 42 21 10 6.6 M ZeroCERT

keyword