popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12496 2023-06-08 17:40 SY.exe  

1190c6a8211a23925ec5342f1b457192


RAT email stealer Downloader Confuser .NET DNS Code injection PWS[m] Escalate priviledges persistence KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		1 9.4 M 39 ZeroCERT

12497 2023-06-08 17:40 clclcllclclclcllclclclclcllclc...  

3abfcd50698f63ec13889697874b0dfd


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		3 5 7 4.6 M 30 ZeroCERT

12498 2023-06-08 17:39 mdmdmdmdmdmmdmdm%23%23%23%23%2...  

ce692ee68ccc4b7fb7381f0eabfa6891


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		16 19 11 5.4 M 31 ZeroCERT

12499 2023-06-08 17:38 mimimimimimimiimii%23%23%23%23...  

f773fdea0e32c51ffea025bc50767210


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		4 6 7 5.0 M 30 ZeroCERT

12500 2023-06-08 17:36 cleanmgr.exe  

e95742503cd258666b61c5dde8a9003a


UPX Malicious Library PE File PE32 JPEG Format DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder DNS 		1 3.4 M 20 ZeroCERT

12501 2023-06-08 17:36 ijoijoijoijoijoijoijoijoijoijo...  

e230816a29bb8af0b5f24adfbe5eff62


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		4 6 7 5.0 M 30 ZeroCERT

12502 2023-06-08 17:34 remcos_a2.exe  

9aa44989b63c667ede9f25e26497c20f


Generic Malware UPX Malicious Library Downloader Malicious Packer OS Processor Check PE File PE32 Malware download Remcos VirusTotal Malware AutoRuns Malicious Traffic Check memory Windows DNS 		1 3 2 3.6 M 60 ZeroCERT

12503 2023-06-08 17:33 rsrsrsrsrsrrsrsrsrsrsrsrssrsrs...  

39669a47b553f5d6b3ed6b730d7852f9


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit crashed 		3.6 M 30 ZeroCERT

12504 2023-06-08 14:02 photo250.exe  

e53eb222dce17efcdcac2c00cacb6c45


RedLine stealer[m] Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) PWS[m] AntiDebug AntiVM CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 9 3 20.8 M ZeroCERT

12505 2023-06-08 14:00 photo250.exe  

cf66c33d6331c8d39b8058b46d59c108


RedLine stealer[m] Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer PWS[m] AntiDebug AntiVM CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 9 3 20.6 M ZeroCERT

12506 2023-06-08 13:59 2.exe  

991184ef5c59ae33725e99a2e828ef8e


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 35 ZeroCERT

12507 2023-06-08 13:47 hostdll.exe  

d8c387e22a23fcdac8444ff9d43ebef8


Generic Malware UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns Check memory RWX flags setting AntiVM_Disk suspicious TLD sandbox evasion VM Disk Size Check Windows Browser DNS 		2 1 4.2 60 ZeroCERT

12508 2023-06-08 11:28 File_pass1234.7z  

66448293af6065ecbcfb9038e202d4b6


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Malware Telegram suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows Trojan DNS 		20 39 18 6 6.2 M ZeroCERT

12509 2023-06-08 11:15 final.docm  

ea8f8a4cd85177248a08490f05d1b555


VBA_macro ZIP Format Word 2007 file format(docx) VirusTotal Malware exploit crash unpack itself Exploit crashed 		3.8 37 ZeroCERT

12510 2023-06-08 11:08 cleanmgrs.exe  

5acd030fa8d6773c21b19a4468727d05


RAT NSIS UPX Malicious Library PE File PE32 GIF Format PNG Format .NET DLL OS Processor Check DLL PE64 VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself AppData folder 		2.8 9 ZeroCERT

keyword