popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12751 2023-05-30 17:27 mslink1.exe  

2f41ab13ff3d31ff39b85a4ff6501a0f


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		1.8 M 29 ZeroCERT

12752 2023-05-30 17:25 kkraken.png  

9ad05df0b2acb11c60556ad6c0cb0ec2


PWS .NET framework RAT SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		11.0 M 45 ZeroCERT

12753 2023-05-30 17:25 binn.exe  

30a3926a8293094811d943a6b26fced2


PWS .NET framework .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.2 M 39 ZeroCERT

12754 2023-05-30 17:23 GIB.exe  

d4e2fa45feaaaae4012c30b47c9eb9cd


Admin Tool (Sysinternals etc ...) KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 11.0 M 25 ZeroCERT

12755 2023-05-30 17:23 uiuiuiuiuui%23%23%23%23%23%23%...  

3152aef08e3025e3ce9efe5db513f5dd


MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		2 2 12 5.4 M 31 ZeroCERT

12756 2023-05-30 17:21 trust.exe  

1f95b8c2dc09a84f6a9fe6f74dbf7d96


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 33 ZeroCERT

12757 2023-05-30 17:21 INET.exe  

c2d972a2b74ef5bd3db1f8a7c939e088


PWS .NET framework Formbook SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Browser Email ComputerName Cryptographic key Software crashed 		11.2 M 28 ZeroCERT

12758 2023-05-30 17:19 100.exe  

022ffcaf0d05a9f02b4199f44c40d86a


RAT Generic Malware UPX Malicious Library Antivirus Malicious Packer OS Processor Check PE File PE32 PE64 VirusTotal Malware powershell PDB suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AppData folder Windows ComputerName Remote Code Execution Cryptographic key crashed 		7.2 M 41 ZeroCERT

12759 2023-05-30 17:19 serfew.exe  

c12e38b35a365aeb19e001bf4ca76ae9


Raccoon Stealer Generic Malware UPX Obsidium protector PE File PE32 VirusTotal Malware Remote Code Execution 		1.4 M 27 ZeroCERT

12760 2023-05-30 17:16 kakazx.doc  

d89bca5a30ab63889a8d2829dc6704a6


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Exploit crashed 		3.0 29 ZeroCERT

12761 2023-05-30 17:16 IE_NET.exe  

aa8062b0fe51ad7da061a51ca03f1ea0


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself DNS 		1 2.2 M 33 ZeroCERT

12762 2023-05-30 17:14 IE_NET.exe  

7f7fa32e062ebeb860b487840ea9c95f


Loki Loki_b Loki_m Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities malicious URLs installed browsers check Windows Browser Email ComputerName DNS Software 		1 1 7 1 13.8 M 25 ZeroCERT

12763 2023-05-30 17:14 ready.exe  

68a12439e64b2e4fd0733e2600153045


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself DNS 		1 2.6 M 34 ZeroCERT

12764 2023-05-30 17:13 sQdXMQIHJl75b1w.exe  

e7f043a52ed8bbd9dd37bec764801f7e


Suspicious_Script_Bin task schedule Admin Tool (Sysinternals etc ...) ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 Malware download NetWireRC VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check DCRat Windows ComputerName crashed 		4 2 1 4 11.8 M 30 ZeroCERT

12765 2023-05-30 17:12 INET.exe  

7f9f5628b1698378cecaff303fb4cf2d


PWS .NET framework Formbook SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Browser Email ComputerName Cryptographic key Software crashed 		12.4 M 37 ZeroCERT

keyword