popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12301 2023-06-13 22:43 Remc.exe  

7b0951243f7919dfbbe6489a0218845e


Generic Malware UPX Malicious Library Downloader Malicious Packer OS Processor Check PE File PE32 JPEG Format Remcos VirusTotal Malware Malicious Traffic Check memory human activity check Windows DNS keylogger 		1 4 2 3.8 51 ZeroCERT

12302 2023-06-13 22:42 c15.exe  

30ca9a69f43b4aa80f1496ec0b2fbc00


UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		2.0 39 ZeroCERT

12303 2023-06-13 14:48 File_pass1234.7z  

9a6a7d29d7a28cdd312defc7ce231351


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows Trojan DNS 		16 43 19 9 6.6 M ZeroCERT

12304 2023-06-13 14:21 G_768916.rar  

e9775d944eddde92787307f5e2523c2c


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger Creates executable files unpack itself 		2.0 ZeroCERT

12305 2023-06-13 10:51 Tax-documents_pdf.jar  

605c34aa279611cc01669887eee38a01


ZIP Format VirusTotal Malware AutoRuns Check memory Checks debugger RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process Windows DNS crashed 		2 4.6 20 ZeroCERT

12306 2023-06-13 10:40 File_pass1234.7z  

f54d88f319d55d71e0a05be63f90f006


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Stealer Windows Trojan DNS 		21 45 20 8 6.2 M ZeroCERT

12307 2023-06-13 10:11 document.doc  

eabac2151828caacfa7c253d84a7b891


VBA_macro Generic Malware MSOffice File Malware download Kimsuky VirusTotal Malware Campaign wscript.exe payload download exploit crash unpack itself North Korea Exploit crashed 		2 2 3 1 6.2 37 ZeroCERT

12308 2023-06-13 09:56 smartoption.php.html  

00cf40deab29bc4bdf812434e171c14c


Generic Malware Antivirus PowerShell Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10 2 8.2 ZeroCERT

12309 2023-06-13 09:50 smartoption.php.html  

00cf40deab29bc4bdf812434e171c14c

unpack itself crashed 		0.6 ZeroCERT

12310 2023-06-13 09:44 readme.doc  

332f3efeb2f7f9cc98e3cea2c069a3a5


VBA_macro Generic Malware MSOffice File Malware download Kimsuky VirusTotal Malware Campaign wscript.exe payload download exploit crash unpack itself North Korea Exploit crashed 		1 2 3 6.2 38 ZeroCERT

12311 2023-06-13 09:27 setup.exe  

94a8cb37cf0aa2d1fedb893167f4dc67


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 31 ZeroCERT

12312 2023-06-13 09:25 toolspub2.exe  

46a85f9fb354c4a5c4ea7a321ee9c3b9


Malicious Library AntiDebug AntiVM PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		7.0 M 32 ZeroCERT

12313 2023-06-13 09:22 ijijijijijijijijijijijijiji%23...  

18de0cc6af559b80698181bce1ab907b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted exploit crash Exploit crashed 		3.2 M 35 ZeroCERT

12314 2023-06-13 09:13 ikikikikikikikikikiki%23%23%23...  

e8caac8d865f4a94f766c5935fcf669f


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed 		1 1 1 4.6 M 31 ZeroCERT

12315 2023-06-13 08:40 joy.exe  

046ed750609f61a01f15f23d2f2ac351


Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		9.6 M 42 ZeroCERT

keyword