popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12556 2023-06-07 07:43 88999.exe  

ee9f9565049005c3fc1dfd32db706ef8


UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Creates executable files unpack itself AppData folder Tofsee Windows Remote Code Execution DNS 		3 4 3 8.0 57 ZeroCERT

12557 2023-06-07 07:41 ceshi.exe  

25214ee067e1480fa57f0ffd143ebb03


Malicious Library PE File PE32 VirusTotal Malware AutoRuns PDB suspicious privilege Malicious Traffic Creates executable files unpack itself suspicious TLD Windows DNS 		2 4 4 6.8 58 ZeroCERT

12558 2023-06-07 07:40 Installer.exe  

38b258c567b378058ac5cad63ab59584


UPX OS Processor Check PE File PE32 VirusTotal Malware Checks debugger unpack itself 		4 18 2.4 32 ZeroCERT

12559 2023-06-07 07:38 BBHhHhB.exe  

543e32d9617d5851aef813fe77310a84


RAT .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		2 1 3.0 M 43 ZeroCERT

12560 2023-06-07 07:37 H.exe  

a5a287e329d02dd5d3d7a33927f8c010


Formbook AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself suspicious TLD DNS 		19 19 7 18 10.4 M 48 ZeroCERT

12561 2023-06-07 07:36 A.exe  

706c4e397de8260d889cf83ba6707e7c


SMTP PWS[m] KeyLogger AntiDebug AntiVM PE64 PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Browser Email ComputerName DNS DDNS crashed keylogger 		1 2 3 10.4 M 50 ZeroCERT

12562 2023-06-07 07:34 NA.exe  

6c432a8b26bc0e068f23e88f69c0f565


DNS AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		3 1 13.4 M 50 ZeroCERT

12563 2023-06-07 07:32 BHHh.exe  

96b0ccf071277093a2e02fd89ae05dcb


RAT .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		1 3 1 3.4 51 ZeroCERT

12564 2023-06-07 07:30 wininit.exe  

d39050a4b6ef3f4aaa5808d30501d4fd


RAT PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		1.8 20 ZeroCERT

12565 2023-06-07 07:28 Brickbats.exe  

821823659183e8ca89f7d90cb55cae55


PWS .NET framework RAT UPX Confuser .NET OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself Windows Cryptographic key 		2 3.8 34 ZeroCERT

12566 2023-06-07 05:38 ddsc.exe  

6156028337e0510bd3535c891ed15029


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB Code Injection buffers extracted unpack itself Windows utilities sandbox evasion Windows Browser 		2 9.2 M 46 guest

12567 2023-06-05 21:24 ddsc.exe  

6156028337e0510bd3535c891ed15029


UPX Malicious Library OS Processor Check PE File PE32 Malware download Remcos VirusTotal Malware PDB Code Injection Malicious Traffic Check memory buffers extracted unpack itself Windows utilities sandbox evasion Windows Browser 		1 4 2 8.0 36 ZeroCERT

12568 2023-06-05 18:02 c64.exe  

b1e73ee6b76cdb99e5fcde09936de056


Gen2 Gen1 Emotet Generic Malware Downloader UPX Malicious Library Malicious Packer Antivirus Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenShot Anti VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Creates executable files unpack itself Windows utilities Auto service suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization VM Disk Size Check Windows ComputerName Remote Code Execution 		4 14.6 52 ZeroCERT

12569 2023-06-05 17:56 iexplore.exe  

a3d8b7059f0a4108d38144586fd63ee0


Generic Malware UPX Antivirus Malicious Library Malicious Packer PE File PE32 PE64 OS Processor Check VirusTotal Cryptocurrency Miner Malware Cryptocurrency powershell AutoRuns suspicious privilege Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW anti-virtualization Windows ComputerName Remote Code Execution crashed 		2 1 13.0 M 56 ZeroCERT

12570 2023-06-05 17:55 86.exe  

ff8a7fe058166ccb1d7822fa873cdca5


UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL VirusTotal Malware AutoRuns Check memory Creates executable files Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW Windows Remote Code Execution 		2 7.6 M 51 ZeroCERT

keyword