popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12631 2023-06-02 09:30 uiuiuiuiuiuiuiuiuiuiuiu%23%23%...  

64d39883417401cc3d8ea3f76d4a9a50


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		11 11 8 6.4 M 31 ZeroCERT

12632 2023-06-02 09:27 Client2.jpg  

3b505e72fe4fa5017eda28c54dac0c09


PWS .NET framework RAT UPX Confuser .NET OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 M 54 ZeroCERT

12633 2023-06-02 09:27 iiiiiiiiiiiiiii%23%23%23%23%23...  

63c35801f8976124d6d45b9290bb627e


Loki MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		2 3 14 1 5.4 M 36 ZeroCERT

12634 2023-06-02 09:25 M.exe  

cd7722e668bab8732008fc21cd5c54c8


RAT Confuser .NET SMTP PWS[m] KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware Telegram PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs IP Check Tofsee DNS DDNS keylogger 		1 4 7 9.0 M 30 ZeroCERT

12635 2023-06-02 09:25 agodzx.doc  

f444eefc2067791f77e8dea8336ede2e


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself IP Check Tofsee Windows Exploit DNS crashed 		2 5 7 5.0 M 30 ZeroCERT

12636 2023-06-02 09:23 Nano.exe  

cc23b614fd8b8174dabacc2c124742ca


RAT Confuser .NET DNS AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		3 1 13.0 M 25 ZeroCERT

12637 2023-06-02 09:23 ga.exe  

384cc4b1c3c5d9bce6eb9b1c70e2c54a


task schedule AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS 		1 9.4 M 28 ZeroCERT

12638 2023-06-01 20:17 jokerzx.exe  

b944726a467c77d311c32460812cabbc


Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 5 14.0 32 ZeroCERT

12639 2023-06-01 20:15 NEV.exe  

e73ae25fc0adaafd0b7e6adbdc06683f


AgentTesla browser info stealer Google Chrome User Data Downloader Confuser .NET Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger ScreenShot AntiDebug AntiVM PE64 PE File Browser Info Stealer Remcos VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Browser Email ComputerName DNS 		1 4 1 15.0 19 ZeroCERT

12640 2023-06-01 20:15 seema.exe  

badf16b5411ab2ec95f1dd8cdbb02d8e


Loki_b Loki_m Raccoon Stealer Gen1 Gen2 Generic Malware UPX Malicious Library Malicious Packer Socket DNS HTTP PWS[m] Http API Internet API KeyLogger ScreenShot AntiDebug AntiVM PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted Creates executable files RWX flags setting unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Ransomware Windows Browser Email ComputerName Software crashed 		1 2 2 15.0 27 ZeroCERT

12641 2023-06-01 19:56 1.html  

9b78bbb925f4d5e4fb3b19b1962674b9


Generic Malware Antivirus Hide_URL AntiDebug AntiVM Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 9.8 M ZeroCERT

12642 2023-06-01 19:46 1.html  

9b78bbb925f4d5e4fb3b19b1962674b9


Generic Malware Antivirus Browser Info Stealer MachineGuid Code Injection Checks debugger exploit crash unpack itself installed browsers check Exploit Browser crashed 		3.6 M ZeroCERT

12643 2023-06-01 19:39 zpeu.exe  

9dca43cb15d97693d2de73683804c5c7


NSIS Suspicious_Script_Bin UPX Malicious Library PE File PE32 DLL .NET DLL VirusTotal Malware AppData folder 		1.0 6 ZeroCERT

12644 2023-06-01 19:39 zp.exe  

849acb6881494898ff4a18a4a0fbdb43


NSIS Suspicious_Script_Bin UPX Malicious Library PE File PE32 DLL PNG Format VirusTotal Malware AppData folder 		1.2 10 ZeroCERT

12645 2023-06-01 19:32 b66ssc.dotm  

9a1cac28f716d2e660f2bd6297cd560b


VBA_macro Generic Malware Antivirus UPX Malicious Library ZIP Format Word 2007 file format(docx) OS Processor Check PE File PE32 VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself powershell.exe wrote suspicious process Windows Exploit ComputerName DNS Cryptographic key crashed 		2 1 7 1 9.2 14 ZeroCERT

keyword