popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12706 2023-05-31 17:53 wall.exe  

014b9db957bdbafe8a48ec5cd4004f0e


RAT Gen2 Gen1 Malicious Library Malicious Packer .NET EXE PE File PE32 PE64 VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself ComputerName 		3.4 M 50 ZeroCERT

12707 2023-05-31 17:52 d9ff4ed3.exe  

1313175470e5c024f9d74e38a4c9ceb2


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 34 ZeroCERT

12708 2023-05-31 17:51 TelexCopy.png  

c332f541894866c101840b77191efaa8


PWS .NET framework SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 11.6 M 18 ZeroCERT

12709 2023-05-31 17:50 cache.exe  

b38f30630c599a64feface7bdd4e2040


PWS .NET framework SMTP Code injection PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		12.0 M 38 ZeroCERT

12710 2023-05-31 17:48 tititiitititiiti%23%23%23%23%2...  

15d6c18e34ad68f0907981c8850ba29f


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit crashed 		3.6 M 35 ZeroCERT

12711 2023-05-31 17:48 Government%20policy%20Updated%...  

975ea012aff8d8dcc37638be840684e5


ZIP Format Word 2007 file format(docx) Vulnerability VirusTotal Malware unpack itself DNS 		1 5.0 M 38 ZeroCERT

12712 2023-05-31 15:18 2374471  

cd87249ec679ff1579688eff5cafc8df


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself installed browsers check Browser Email 		3.2 Kim.GS

12713 2023-05-31 13:44 doc_A841_May_30.js  

10db452f997c16bb199730993f84443c

VirusTotal Malware crashed 		0.6 1 ZeroCERT

12714 2023-05-31 13:42 doc_A839_May_30.js  

4f02c3deeb748ef553239cea3e049049

VirusTotal Malware crashed 		0.6 1 ZeroCERT

12715 2023-05-31 13:42 doc_A814_May_30.js  

42d07972175080527ff2d3114d076da4

VirusTotal Malware unpack itself crashed 		1.0 1 ZeroCERT

12716 2023-05-31 13:41 doc_A804_May_30.js  

2413e2e7cbb781e5ddd8d0c8bed5fea3

VirusTotal Malware crashed 		0.6 2 ZeroCERT

12717 2023-05-31 09:31 tcpupdate.exe  

fc370061296aefef63818d1a9069f21e


RAT UPX PWS[m] AntiDebug AntiVM PE64 PE File Browser Info Stealer Malware download VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Collect installed applications suspicious process installed browsers check SectopRAT Windows Browser Backdoor ComputerName DNS Cryptographic key crashed 		1 1 12.0 M 36 ZeroCERT

12718 2023-05-31 09:29 1.exe  

3f005ce85f08a09e93679254e35df782


Generic Malware UPX Malicious Library Malicious Packer Antivirus OS Processor Check PE64 PE File VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		7.2 M 49 ZeroCERT

12719 2023-05-31 09:28 smss.exe  

2245ba729d9b9cb1ee2be35a736ddc41


AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows DNS Cryptographic key 		14 16 4 8.4 M 40 ZeroCERT

12720 2023-05-31 09:25 ilililililililil%23%23%23%23%2...  

37da8e8fb8400046aa010dd182aa28f7


MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		2 2 12 5.0 M 12 ZeroCERT

keyword