popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12736 2023-05-31 00:32 InvictaStealer.exe  

986a9cd4347aa2207ae5fdbffecfae5a


UPX Malicious Library OS Processor Check PE64 PE File VirusTotal Malware anti-virtualization 		2.4 46 guest

12737 2023-05-31 00:26 Builder.exe  

1866f69cfaeeda3915074a0aab36717a


UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File PDB Check memory ComputerName 		0.8 guest

12738 2023-05-30 18:07 Install_pass1234.7z  

6c43db16ae6a2ad7ec9b609447cbb0ac


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealer Windows DNS 		11 31 13 6 6.2 M ZeroCERT

12739 2023-05-30 17:46 6475b089e47aa.zip  

6e2306600d820049c30f438bc39c2edf


ZIP Format Malware Malicious Traffic NetSupport 		3 4 5 0.8 ZeroCERT

12740 2023-05-30 17:40 wefrswer.exe  

a5d280743e7a6cb631f3868a410596ad


Raccoon Stealer Generic Malware UPX PE File PE32 VirusTotal Malware Remote Code Execution 		1.6 M 30 ZeroCERT

12741 2023-05-30 17:38 oceanzx.doc  

929bfc2d650dfa49c9a6133095ecf2fb


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Telegram Malicious Traffic exploit crash unpack itself Tofsee Windows Exploit DNS crashed 		1 3 9 4.4 M 29 ZeroCERT

12742 2023-05-30 17:36 internet.exe  

993d95f1880cbd2145649f02734b2a94


AgentTesla browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key DDNS crashed 		2 2 12.2 M 37 ZeroCERT

12743 2023-05-30 17:36 IE_BROWSER.exe  

506c7276a56ad45ffe3845e55849e013


Loki Loki_b Loki_m PWS .NET framework RAT Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 14.6 M 34 ZeroCERT

12744 2023-05-30 17:34 kakazx.doc  

d89bca5a30ab63889a8d2829dc6704a6


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash Tofsee Windows Exploit DNS crashed 		1 3 7 4.6 M 29 ZeroCERT

12745 2023-05-30 17:34 ewrue.exe  

c814a51d0729f9c380eb939550abe75c


Raccoon Stealer Generic Malware UPX PE File PE32 VirusTotal Malware Remote Code Execution 		1.6 M 39 ZeroCERT

12746 2023-05-30 17:32 smss.exe  

d9e03dba3c5cce141156dc0cdd710b31


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL VirusTotal Malware AutoRuns Check memory Creates executable files unpack itself AppData folder Windows crashed 		4.0 M 35 ZeroCERT

12747 2023-05-30 17:32 6523.exe  

72b9eecc26102e197e4fd9bd33d93783


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.6 M 31 ZeroCERT

12748 2023-05-30 17:30 oceanzx.exe  

b63a30317660234ab69e300dde19bf68


KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 12.2 M 26 ZeroCERT

12749 2023-05-30 17:29 kiikikikikikikiikikii%23%23%23...  

454cb4cd20f392c5147c69ecdab428f4


Loki MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed 		2 2 13 1 5.4 M 30 ZeroCERT

12750 2023-05-30 17:28 jahah.png  

908da2b3f1932cce84084df7d5ba2218


PWS .NET framework SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 12.0 M 32 ZeroCERT

keyword