popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12601 2023-06-02 18:43 File_pass1234.7z  

63e2ad5f5f1466a924b0c77048dcc60a


Redline PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows DNS 		17 32 18 8 7.6 M ZeroCERT

12602 2023-06-02 18:40 BandicamScreenRecorder_pass123...  

0dd10d786758af063a14efaff9ebf78e


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM Malware download Malware RecordBreaker suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Tofsee Stealer Windows DNS 		34 12 15 3.8 ZeroCERT

12603 2023-06-02 18:34 ddd.json.ps1  

558632789032f0e8cb4f4be1c784ed08


Hide_EXE Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 M 16 ZeroCERT

12604 2023-06-02 18:33 Atm_Fradulent_Transaction_Note...  

0f721b8721fcf53a2f584d1e14576222

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download AntiVM_Disk VM Disk Size Check Windows ComputerName Dropper 		2 1 10.0 3 ZeroCERT

12605 2023-06-02 18:29 647935b3df1dc.zip  

2e1d77880b713f913c52773045cae78d


ZIP Format Malware Malicious Traffic NetSupport 		3 4 3 0.8 ZeroCERT

12606 2023-06-02 17:50 hkcmd.exe  

47e139c4d15656a318c89ceab3fd3779


Loki Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 14.2 M 40 ZeroCERT

12607 2023-06-02 17:48 hkcmd.exe  

a9ef402dafd9bf3e6ecad54f7a5c5cce


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.8 M 23 ZeroCERT

12608 2023-06-02 17:46 ioioioioioioioioioioio%23%23%2...  

b7317b332d56b95754a97d72aab04605


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash suspicious TLD Windows Exploit DNS crashed 		5 11 11 6.4 M 30 ZeroCERT

12609 2023-06-02 17:46 grace.exe  

b74a27f1d2f59773c8fc41c831600fe3


Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself crashed 		2.2 M 30 ZeroCERT

12610 2023-06-02 17:42 cc.exe  

db1d5ad95e2020413ca89f274657f3b1


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		1.8 M 27 ZeroCERT

12611 2023-06-02 17:40 hkcmd.exe  

79796093d175c7811e14b67d670efdfc


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 33 ZeroCERT

12612 2023-06-02 17:38 2.exe  

5c3837c38ccbcdd101a0f23550e68443


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.0 M 33 ZeroCERT

12613 2023-06-02 17:36 teambzx.exe  

b83d29d7b66726edbdbb823873e27a18


PWS .NET framework Formbook SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 6 2 13.4 32 ZeroCERT

12614 2023-06-02 17:36 hkcmd.exe  

3ad351e8a6eff6d9405b4cab75a7a2ec


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.6 M 17 ZeroCERT

12615 2023-06-02 17:35 sp.exe  

45d50af2dab49aa0de4894a1bbff7d62


Themida Packer Generic Malware Malicious Library PE64 PE File VirusTotal Malware unpack itself Windows crashed 		2.8 38 ZeroCERT

keyword