popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12721 2023-05-31 09:24 smss.exe  

2245ba729d9b9cb1ee2be35a736ddc41


AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD Windows DNS Cryptographic key 		17 18 3 8.4 M 40 ZeroCERT

12722 2023-05-31 09:24 jijijijijjijijijijiijiji%23%23...  

e4ca6a35d8419838d19df794b67b0548


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		2 2 6 4.6 M 35 ZeroCERT

12723 2023-05-31 09:23 netTime.exe  

01ec31a1ad9fed1136bd9e7f3c164ffc


Gen2 Gen1 PWS .NET framework RAT Generic Malware UPX Malicious Packer Antivirus OS Processor Check PE64 PE File VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process Windows ComputerName DNS Cryptographic key 		1 5.8 M 23 ZeroCERT

12724 2023-05-31 09:21 INTERNET.exe  

a83e6f2744a3e36adcbfe8065fb1629d


UPX Malicious Library PE File PE32 PNG Format DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		3.6 M 28 ZeroCERT

12725 2023-05-31 09:20 ogumbgejapxd.exe  

debdaacd07fee04f25870cbcaf1b09e0


Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware crashed 		1.2 M 32 ZeroCERT

12726 2023-05-31 09:20 95.214.25.234:3002  

fbe308a5e648c419b03b10f911af7a4d


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB 		1.4 M 28 ZeroCERT

12727 2023-05-31 09:19 jtjtjtjjtjtjtjjtjtjtjjtjtjjtj%...  

d5f1fcbea622e3a99638f18a06493af3


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		10 10 7 5.0 M 34 ZeroCERT

12728 2023-05-31 09:18 tg.exe  

da5b8144aed2113cdd7df3f3c164fb0b


UPX Malicious Library ScreenShot AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted RWX flags setting unpack itself crashed 		7.4 M 39 ZeroCERT

12729 2023-05-31 09:15 IE_NET.exe  

67db8431a355d41b2fbc33bb22065990


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		1.8 M 29 ZeroCERT

12730 2023-05-31 09:15 tititititiitititititi%23%23%23...  

52a40a96fd119c25e2e6c945c2dd64b2


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Telegram Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Windows Exploit DNS crashed 		1 3 9 5.0 M 35 ZeroCERT

12731 2023-05-31 09:13 smss.exe  

c044a0d5c30ed978cc2fdde590e037ec


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself AppData folder Windows crashed 		4.2 42 ZeroCERT

12732 2023-05-31 09:13 INTERNET.exe  

6a0226121465d952589d6e5d2d2ecc4a


RAT UPX .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.6 16 ZeroCERT

12733 2023-05-31 07:40 tomPayload.vbs  

ed9d50c49eec449622373db6959f9186


Formbook Generic Malware Antivirus PowerShell VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.2 7 ZeroCERT

12734 2023-05-31 07:38 translate.res  

92d994be99ea43c121ac4f4ddfacbf75


UPX Malicious Library RTF File doc OS Processor Check DLL PE File PE32 VirusTotal Malware buffers extracted RWX flags setting exploit crash AppData folder Exploit crashed 		3.2 M 34 ZeroCERT

12735 2023-05-31 07:20 plugmanzx.doc  

bf084f461abb357afd8a709cbced50da


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS DDNS crashed 		1 3 6 4.8 M 29 ZeroCERT

keyword