popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12226 2023-06-14 17:46 netTime.exe  

69b55498f8568671d14a91a952c82b49


Emotet PWS .NET framework RAT Generic Malware UPX Malicious Packer Antivirus PE64 PE File VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process Windows ComputerName Remote Code Execution Cryptographic key 		5.0 M 25 ZeroCERT

12227 2023-06-14 17:46 Ref%20EU482002Y92DH983HR9UOFR0...  

bee4228379337219946d60655bfa9341


PWS .NET framework .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 M 26 ZeroCERT

12228 2023-06-14 17:44 setup.exe  

ca29125444e8792b19fe34c901fc6721


Suspicious_Script_Bin UPX Malicious Library PE File PE32 Check memory Creates executable files 		0.8 M ZeroCERT

12229 2023-06-14 17:44 AsyncClient.exe  

3dc64f540a2a9278e15cadf61d71369f


Generic Malware UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		2.0 M 31 ZeroCERT

12230 2023-06-14 17:42 Client-built202.exe  

81fe02b22a1c5d7d2f58071929b4c6dd


Generic Malware UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		1.8 M 22 ZeroCERT

12231 2023-06-14 17:42 DOO.exe  

ae6f85c26fa500b5c13cb8775c1a5b22


Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself crashed 		2.2 M 32 ZeroCERT

12232 2023-06-14 16:04 7za_SC.bat  

4bd2a27b7bb64b9d060d0e4cafadceac


Downloader Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenShot AntiDebug AntiVM WriteConsoleW 		0.6 ZeroCERT

12233 2023-06-14 16:02 hh.exe  

49e5db7cd2169dfc4d0e2011beccf2a0


Generic Malware UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		2.2 M 50 r0d

12234 2023-06-14 16:01 hh.exe  

49e5db7cd2169dfc4d0e2011beccf2a0


Generic Malware UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		2.2 M 50 r0d

12235 2023-06-14 15:38 photo221.exe  

af65da5da42fc008093bee50c7479c30


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 10 3 15.6 M ZeroCERT

12236 2023-06-14 15:36 fotod75.exe  

3be106aaea624a6423d549f9227e1535


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 10 3 16.8 M 43 ZeroCERT

12237 2023-06-14 15:34 23.exe  

428d5dbe757e12d9981141ebc01725c5


Gen2 Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 icon Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger Creates executable files exploit crash unpack itself Check virtual network interfaces installed browsers check Windows Exploit Browser Remote Code Execution Cryptographic key crashed 		9.0 M 32 ZeroCERT

12238 2023-06-14 13:50 File_pass1234.7z  

9a6a7d29d7a28cdd312defc7ce231351


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey VirusTotal Malware Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Kelihos Tofsee Stealer Windows Discord Trojan DNS 		24 47 27 11 6.6 M 1 ZeroCERT

12239 2023-06-14 13:40 unknown.zip  

93b21205544e5f6eab2df513c96cda2b


ZIP Format VirusTotal Malware 		0.8 M 24 ZeroCERT

12240 2023-06-14 10:07 jgpBAvoF9bOl.js  

d0bcc81b0ece3fb4b0d58591480e4ab7


Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key 		9 6.0 9 ZeroCERT

keyword