popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12451 2023-06-11 21:33 [Content_Types].xml  

7084b736cec7aca9dcd6448907d35fb2


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

12452 2023-06-11 21:33 movijediz.pdf  

0ff2c5b81c1798b89b8615c9a7921af1


PDF Suspicious Link PDF VirusTotal Malware 		0.8 M 22 ZeroCERT

12453 2023-06-11 11:31 Screenshot_20230610_211553_Chr...  

4ae76d53f0c8224aabf8b3e503bd5c98


JPEG Format 		guest

12454 2023-06-10 03:39 swagger.yaml  

d0ee497143db1977852d705d03f21728


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

12455 2023-06-10 03:17 swagger.yaml  

d0ee497143db1977852d705d03f21728


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

12456 2023-06-10 01:53 Pure Chat Report (2).csv  

6ab8955aa20aa2626dc06762f08ddf09


PWS[m] KeyLogger ScreenShot AntiDebug AntiVM Vulnerability MachineGuid unpack itself 		1.6 guest

12457 2023-06-09 17:57 HBZ.exe  

cc0a1c96c14263e48f82965ff47e0521


NSIS Generic Malware UPX Malicious Library Antivirus PE File PE32 PowerShell JPEG Format powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		7.0 ZeroCERT

12458 2023-06-09 17:22 File_pass1234.7z  

cc9553fe73f1f3663db568a4c369037f


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Malware Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows Trojan DNS 		24 46 18 11 6.6 M ZeroCERT

12459 2023-06-09 16:56 Setup.exe  

df3795e6842e839cf45e694b7164ee17


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.6 38 ZeroCERT

12460 2023-06-09 16:55 Mcdonalds3.php  

68be007bd3fa09d26fcee584a9157770


UPX Malicious Library Malicious Packer PE File PE32 Malware download VirusTotal Malware AutoRuns Malicious Traffic Creates executable files AppData folder Windows DNS 		2 1 3 2 6.2 M 54 ZeroCERT

12461 2023-06-09 16:54 tdc.jpg  

4c7c7f9e5fb5f706972574aca7a21260


PWS .NET framework RAT UPX Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer RedLine Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Stealer Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 6.2 M 51 ZeroCERT

12462 2023-06-09 16:38 LokiLocker.exe  

d03823a205919b6927f3fa3164be5ac5


UltraVNC UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware powershell AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW shadowcopy delete Ransom Message Turn off Windows Error Recovery notification window Firewall state off anti-virtualization Creates autorun.inf IP Check VM Disk Size Check human activity check installed browsers check Windows Browser ComputerName Cryptographic key crashed 		1 2 1 19.6 56 r0d

12463 2023-06-09 16:18 SOA-0438.xlsx  

261cc699f2de3e15d63c9a9180cb8625


ZIP Format Malware download Remcos VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		3 5 7 4.2 37 ZeroCERT

12464 2023-06-09 15:50 LokiLocker.exe  

d03823a205919b6927f3fa3164be5ac5


UltraVNC UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware powershell AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW shadowcopy delete Ransom Message Turn off Windows Error Recovery notification window Firewall state off anti-virtualization Creates autorun.inf IP Check VM Disk Size Check human activity check installed browsers check Windows Browser ComputerName Cryptographic key crashed 		1 2 1 18.6 56 ZeroCERT

12465 2023-06-09 11:12 upgrade.exe  

a07dc64946ef6ed57eb50821ee02415b


UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself crashed 		2.0 M 33 ZeroCERT

keyword