popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12526 2023-06-07 18:25 SO785000670065_GK3G46943006_PO...  

97276eade4a474b02892b080fa0cae20


NSIS Suspicious_Script_Bin UPX Malicious Library PE File PE32 OS Processor Check DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.8 32 ZeroCERT

12527 2023-06-07 17:59 file.xls  

b4b1d0f39ef9ad937d94513e95d324d0


VBA_macro Antivirus MSOffice File VirusTotal Malware exploit crash unpack itself Exploit crashed 		1.8 29 ZeroCERT

12528 2023-06-07 17:34 cleanmgr.exe  

33108fe9d2b46a295190763ebb4083f7


AgentTesla PWS .NET framework browser info stealer Google Chrome User Data Downloader UPX Admin Tool (Sysinternals etc ...) ScreenShot Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM .NET EXE PE Fi Browser Info Stealer Remcos VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key DDNS crashed keylogger 		1 4 3 15.6 M 29 ZeroCERT

12529 2023-06-07 17:32 2d7f71dfd2399ffc78575f12b3d751...  

af1a989a2a9bd61b087cace076971f6a


UPX Malicious Library Malicious Packer PE File PE32 BMP Format VirusTotal Malware Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check 		2.6 M 19 ZeroCERT

12530 2023-06-07 17:31 iiihiiiihiiiihiiiihiiihiiih%23...  

a82d5070b20af38ed372d74774a661b8


MS_RTF_Obfuscation_Objects RTF File doc Malware download Remcos VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS DDNS crashed 		2 5 8 5.4 M 30 ZeroCERT

12531 2023-06-07 17:30 pmCxohhd.exe  

2cf24e55ad1aad958e73c67878952c68


PWS .NET framework RAT UPX OS Processor Check PE64 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 51 ZeroCERT

12532 2023-06-07 17:29 llilliliiilllilililililillili%...  

d34424d4ff9030116dedad2314fabbcf


MS_RTF_Obfuscation_Objects RTF File doc Malware download Remcos VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS DDNS crashed 		2 5 8 5.4 M 30 ZeroCERT

12533 2023-06-07 17:29 ghjkl.exe  

6304e54325ff26109e8dcea07bfd74ad


PWS .NET framework RAT Generic Malware UPX Antivirus PWS[m] ScreenShot Anti_VM AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself powershell.exe wrote suspicious process AppData folder Windows ComputerName Cryptographic key crashed 		13.6 M 57 ZeroCERT

12534 2023-06-07 17:28 nevv.exe  

58a91896eaf6efe03ffe6ebb7b731792


AgentTesla RAT browser info stealer Google Chrome User Data Downloader Confuser .NET Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS 		1 7.6 M 46 ZeroCERT

12535 2023-06-07 16:04 File_pass1234.7z  

dc266faa26395c58a3e0a99c4691be37


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Stealer Windows DNS 		12 31 15 7 5.8 M ZeroCERT

12536 2023-06-07 13:42 index.html  

e66507bcd2afe260f82a61cb981ec964


AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 3.8 guest

12537 2023-06-07 13:40 System.ERROR.Log.915f56c710ede...  

821fa2667e4aec575987afcef2276fe5


CAB MSOffice File DLL PE64 PE File Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 4 5.2 ZeroCERT

12538 2023-06-07 13:34 Install_pass1234.7z  

21c1b0f8d03d57065b96c639b518886d


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download VirusTotal Malware c&c suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser DNS plugin 		23 35 31 8 6.2 M 7 ZeroCERT

12539 2023-06-07 13:23 File_pass1234.7z  

5dadedcd20637db80749292fb8d55eb8


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Malware c&c suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser DNS plugin 		22 34 31 5 6.2 M ZeroCERT

12540 2023-06-07 10:31 003737.exe  

d93dd4200d1997c9b734bc2b1de77dc8


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		4 5 4 5.0 44 ZeroCERT

keyword