popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12781 2023-05-30 10:25 File_pass1234.7z  

1a2c8653d23e5f54570f9600ea338ab4


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Stealer Windows DNS 		13 31 14 4 5.8 M ZeroCERT

12782 2023-05-30 10:20 File_pass1234.7z  

1a2c8653d23e5f54570f9600ea338ab4


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself 		1.6 M ZeroCERT

12783 2023-05-30 09:56 foto148.exe  

bd83774449462adfb38deec655db2d53


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 10 3 13.8 M ZeroCERT

12784 2023-05-30 09:54 fotocr06.exe  

990c304a94d6c1421a36461c0b6bee0d


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 10 3 13.8 M ZeroCERT

12785 2023-05-30 09:52 fotocr06.exe  

990c304a94d6c1421a36461c0b6bee0d


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 9 3 13.8 M ZeroCERT

12786 2023-05-30 09:52 foto148.exe  

bd83774449462adfb38deec655db2d53


Gen1 Emotet UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 9 3 13.8 M ZeroCERT

12787 2023-05-30 09:45 ddd.xlsb  

0e65c589e0c6edffb3b305e7595a271b


ZIP Format Excel Binary Workbook file format(xlsb) VirusTotal Malware exploit crash unpack itself Exploit crashed 		1.8 M 3 ZeroCERT

12788 2023-05-30 09:40 cc.exe  

6752f0f596295d6281b9f48e291aa5e5


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself DNS 		1 2.4 M 27 ZeroCERT

12789 2023-05-30 09:37 macrigan2.1.exe  

c5f9705e5682c03412ec7ca32e22c17c


NSIS UPX Malicious Library PE File PE32 DLL Malware download AveMaria NetWireRC VirusTotal Malware AutoRuns MachineGuid Check memory Creates executable files unpack itself AppData folder Windows RAT ComputerName DNS DDNS keylogger 		3 4 6.0 M 47 ZeroCERT

12790 2023-05-30 09:36 clp6.exe  

d6c0b5e502d7816fa0eb105b10dfa481


UPX Malicious Library OS Processor Check PE64 PE File DNS 		1 2.2 ZeroCERT

12791 2023-05-30 09:36 p0aw25.exe  

8a8c08155bce86d582d32eee9defcfcd


Gen2 Gen1 Malicious Library Malicious Packer PE64 PE File PDB Remote Code Execution 		0.8 ZeroCERT

12792 2023-05-30 09:35 foto148.exe  

1917a7b5b899f2296d04aea2054e9b15


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 2 9 3 13.8 M ZeroCERT

12793 2023-05-30 09:34 Zp1TK71j2PhbPpv.exe  

b1fb36fc31e2e9e18b07abc77c833fe8


Suspicious_Script_Bin task schedule Admin Tool (Sysinternals etc ...) ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 Malware download NetWireRC Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check DCRat Windows ComputerName crashed 		4 2 1 9.8 M ZeroCERT

12794 2023-05-30 09:34 fotocr06.exe  

e9cdf6f42ec689a4f12eed551865668c


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE File PE32 OS Processor Check DLL Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Stealer Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		5 2 11 3 13.8 M ZeroCERT

12795 2023-05-30 00:37 Newtonsoft.Json.dll  

715a1fbee4665e99e859eda667fe8034


RAT UPX .NET DLL DLL PE File PE32 PDB 		0.2 guest

keyword