popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1231 2024-08-11 15:22 66b0ba4420669_main.exe  

fee265f64791e63acdcd3e04acdc93b9


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Malicious Library .NET framework(MSIL) UPX ASPack Http API PWS HTTP Code injection Internet API Anti_VM AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 17.6 M 49 ZeroCERT

1232 2024-08-11 15:21 GGWS.exe  

e2b0ca22d48c42d262cf6015565a106c


RedLine Infostealer UltraVNC Generic Malware Malicious Library UPX PE File PE32 OS Processor Check .NET EXE VirusTotal Malware PDB suspicious privilege Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder Windows DNS Cryptographic key crashed 		2 1 4 7.0 M 42 ZeroCERT

1233 2024-08-11 15:19 66b4ed2ceb0d7_stealc.exe  

c0475f36aa20f3974528fdb57d62bfef


Client SW User Data Stealer ftp Client info stealer Generic Malware Malicious Library .NET framework(MSIL) UPX Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself DNS 		1 10.2 M 43 ZeroCERT

1234 2024-08-11 15:18 eth.exe  

841e052a11d2ea9148d356ae0f9c3577


Malicious Library Antivirus UPX Anti_VM PE File PE64 OS Processor Check VirusTotal Malware 		1.6 M 42 ZeroCERT

1235 2024-08-11 15:18 ramos.exe  

d6612f5d347fb3a1e9b74b324271a5d3


Stealc Amadey Client SW User Data Stealer RedLine stealer Gen1 ftp Client info stealer Generic Malware EnigmaProtector Malicious Library UPX Admin Tool (Sysinternals etc ...) Antivirus Malicious Packer Code injection Http API PWS Anti_VM AntiDeb Browser Info Stealer Malware download Amadey FTP Client Info Stealer Vidar VirusTotal Email Client Info Stealer Malware c&c AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Checks Bios Collect installed applications Detects VMWare AppData folder malicious URLs sandbox evasion VMware anti-virtualization installed browsers check Tofsee Ransomware Stealc Stealer Windows Exploit Browser Email ComputerName DNS Software crashed plugin 		13 5 21 6 24.0 M 39 ZeroCERT

1236 2024-08-11 15:17 beacon.ps1  

c58277271a558ebafd06da61dc074bf4


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself 		1.6 M 38 ZeroCERT

1237 2024-08-11 15:16 random.exe  

278ee1426274818874556aa18fd02e3a


Stealc Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) Antivirus UPX PE File PE32 Malware download VirusTotal Malware c&c Malicious Traffic Check memory unpack itself Stealc ComputerName DNS 		2 1 2 2 3.8 M 59 ZeroCERT

1238 2024-08-11 15:14 file.exe  

0a0441240363fcbfdd3ee5b1f5617f6b


AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself DNS 		1 1 8.2 M 21 ZeroCERT

1239 2024-08-11 15:13 66b5ac1092454_otraba.exe  

f46974f39aebf4f4d039600f3881d6b6


Generic Malware Malicious Library .NET framework(MSIL) UPX ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.8 M 33 ZeroCERT

1240 2024-08-11 15:12 66b7a2aef1283_doz.exe#mene  

eb47857a107cd0ebf986c08be274bd2e


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Generic Malware Malicious Library .NET framework(MSIL) UPX ASPack Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check FTP Client Info Stealer VirusTotal Malware Telegram PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 16.0 M 11 ZeroCERT

1241 2024-08-11 15:10 svch0st.exe  

5575d0030528b163ac14ebe51ebd7da9


Malicious Library PE File PE32 Malware download Cobalt Strike Cobalt VirusTotal Malware Malicious Traffic RWX flags setting unpack itself ComputerName DNS 		1 1 2 4.0 M 59 ZeroCERT

1242 2024-08-11 15:09 pink.exe  

4e0a6df4069761feb9f073276d52847c


Antivirus UPX Anti_VM PE File PE64 OS Processor Check VirusTotal Malware 		1.0 M 36 ZeroCERT

1243 2024-08-11 15:08 request.exe  

ef8320eace6f753231666c61104bdd49


Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Email Client Info Stealer Malware AutoRuns Checks debugger WMI Windows utilities suspicious process WriteConsoleW Tofsee Windows Email ComputerName DNS 		2 3 5.2 M 31 ZeroCERT

1244 2024-08-11 15:07 tt111.exe  

6f09bbce72130d28fbb011ef4dc89668


Malicious Library Antivirus UPX PE File PE64 OS Processor Check VirusTotal Malware PDB 		1.0 M 27 ZeroCERT

1245 2024-08-11 15:06 66b7d3a2e7a4d_deepweb.exe#5k  

4f1b08b2de97134ea899bede6f28098e


RedLine stealer PWS AntiDebug AntiVM BitCoin PE File .NET EXE PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 5 14.6 M 21 ZeroCERT

keyword