popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12616 2023-06-02 17:34 DIV.exe  

3037a91071720c71bf5cc9456a6417d1


Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself crashed 		2.0 29 ZeroCERT

12617 2023-06-02 15:27 hkcmd.exe  

ddfffbdbb97818dc43696266e7a1335d


AgentTesla browser info stealer Google Chrome User Data Downloader Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Remcos VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process Windows ComputerName DNS Cryptographic key DDNS 		1 4 3 9.8 M 44 ZeroCERT

12618 2023-06-02 15:02 3D8207E1CE6762FF10DB118BEE3BD9...  

3d8207e1ce6762ff10db118bee3bd99b


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 51 ZeroCERT

12619 2023-06-02 11:15 ar.exe  

fb08d5b98542effd996cf4dd0e388666


Confuser .NET SMTP PWS[m] KeyLogger AntiDebug AntiVM PE64 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 4 7 12.6 M 26 ZeroCERT

12620 2023-06-02 11:13 ARR.exe  

87bf7cbcaad9c9d42226765a9a00123b


RAT Confuser .NET SMTP PWS[m] KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware Telegram PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs IP Check Tofsee DNS DDNS keylogger 		1 5 7 9.6 M 37 ZeroCERT

12621 2023-06-02 11:13 smss.exe  

1b76b48ed5ab267ec90e78ad7aadacee


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 4 2 12.8 M 48 ZeroCERT

12622 2023-06-02 11:12 R.exe  

75e536684503b069e3f8782abee90845


RAT Confuser .NET AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		11 11 6 8.6 M 20 ZeroCERT

12623 2023-06-02 11:11 agodzx.exe  

c000b09471d65a78c865ef626a7f82e2


PWS .NET framework Formbook SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 4 2 11.2 M 19 ZeroCERT

12624 2023-06-02 11:11 D.exe  

7233778f2b64f9e0cf54a3a15ff91bb2


RAT Confuser .NET AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		19 19 6 8.6 M 24 ZeroCERT

12625 2023-06-02 11:09 second.dll  

82414dead2dfee972e3943c9e26738bc


DLL PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		2.8 M 48 ZeroCERT

12626 2023-06-02 11:07 hkcmd.exe  

7e8983aa9183cc264d567f19d5bfe022


Loki Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.8 M 29 ZeroCERT

12627 2023-06-02 11:07 HKL.vbs  

d21fa8f92d5215bf0dcaa7b777d76ee9


Formbook Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.4 M 10 ZeroCERT

12628 2023-06-02 11:04 iiiiiiiiiiiiiiiiiiiiiiii%23%23...  

8504482b2c616c2052d6ed9656344162


MS_RTF_Obfuscation_Objects RTF File doc Malware download Remcos VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS DDNS crashed 		2 5 8 5.0 M 31 ZeroCERT

12629 2023-06-02 09:33 ziziziziiziziziizizizizi%23%23...  

f18154ad38c526af21cafa86c6188011


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		1 2 5 5.2 M 31 ZeroCERT

12630 2023-06-02 09:31 hkcmd.exe  

ed61febcba66f166082b96a553f2cb33


UPX Malicious Library PE File PE32 PNG Format DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		3.0 M 39 ZeroCERT

keyword