popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12676 2023-06-01 09:41 dhssdf.exe  

7788af5a8c3b75f2ed179ec0a4baa162


Raccoon Stealer Generic Malware UPX PE File PE32 VirusTotal Malware Remote Code Execution 		1.8 M 49 ZeroCERT

12677 2023-06-01 09:33 doc_E795_May_31.js  

2ca4534d37c1835049049fb15804ff50

VirusTotal Malware crashed 		0.6 6 ZeroCERT

12678 2023-06-01 09:28 doc_E795_May_31.js  

2ca4534d37c1835049049fb15804ff50

VirusTotal Malware unpack itself crashed 		1.0 6 ZeroCERT

12679 2023-06-01 09:22 doc_E795_May_31.js  

2ca4534d37c1835049049fb15804ff50

VirusTotal Malware crashed 		0.6 6 ZeroCERT

12680 2023-06-01 09:04 doc_E793_May_31.js  

789ecd6a7badb208e507b0f5ab9a2ecc

unpack itself crashed 		0.6 ZeroCERT

12681 2023-06-01 09:04 doc_E783_May_31.js  

ccb2066654f34eab673eade5480ae4e1

crashed 		0.2 ZeroCERT

12682 2023-06-01 09:04 doc_E795_May_31.js  

2ca4534d37c1835049049fb15804ff50

VirusTotal Malware crashed 		0.6 6 ZeroCERT

12683 2023-06-01 07:41 hkcmd.exe  

e0a9b1817281c6393781144157ea9708


Loki_b Loki_m Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 7 13.4 ZeroCERT

12684 2023-06-01 07:40 smss.exe  

77e3572af01c7a784cb49abc63dc3949


RAT PE64 PE File PDB Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		1.4 ZeroCERT

12685 2023-05-31 23:35 LB937WHXR.pdf  

a4537dfd7b0f26361cb2d5750685c606


PDF 		guest

12686 2023-05-31 22:44 141.exe  

6bb40ed95f770955ea7cf27e4785612e


Cutwail Gene Malware download Cobalt Strike Cobalt VirusTotal Malware c&c Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process suspicious TLD sandbox evasion Tofsee Windows Backdoor ComputerName Remote Code Execution DNS Cryptographic key 		258 666 8 243 16.2 M 17 ZeroCERT

12687 2023-05-31 22:28 IE_CACHE.exe  

e57e1575e0737614cd18c1320b1b1183


UPX Malicious Library PE File PE32 PNG Format DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		3.0 M 34 ZeroCERT

12688 2023-05-31 22:26 oig  

ff7e3106b49aed84ccf0cc485ddb5ee8


ZIP Format DNS 		18 0.6 ZeroCERT

12689 2023-05-31 22:26 smss.exe  

2cdc1ec873cdfe7feaa1b2ec9c246629


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 4 2 12.0 M 33 ZeroCERT

12690 2023-05-31 22:24 INTERNET.exe  

ab63cd70848e6c0cc499abcb927735e8


Loki Loki_b Loki_m Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 7 1 13.8 M 26 ZeroCERT

keyword