popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12811 2023-05-29 13:45 77c43f7e_rd1.exe  

ea9775eca677ed8dea5646a7aa6b750e


PE File PE32 VirusTotal Malware Checks debugger 		1 20 2 2.2 M 42 ZeroCERT

12812 2023-05-29 13:44 debug2.ps1  

071a89f94694990906a4c3aabeae4e7b


Generic Malware Antivirus Malware powershell Malicious Traffic Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 1 4.6 ZeroCERT

12813 2023-05-29 13:43 108.61.117.130:3002  

64806167a0e3b3d2b5bb3bd4d1b32f17


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB 		1.6 M 33 ZeroCERT

12814 2023-05-29 13:29 a02.exe  

820241820224a5c7eed0ca74b7420361


Raccoon Stealer Malicious Library Malicious Packer VMProtect AntiDebug AntiVM PE File PE32 PNG Format VirusTotal Malware Buffer PE AutoRuns MachineGuid Code Injection Check memory buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities AppData folder WriteConsoleW Tofsee Windows DNS 		1 5 2 12.4 M 52 ZeroCERT

12815 2023-05-29 13:26 postmon.exe  

f3e968ba5b17cca9be62e5ca9c9b06f0


Generic Malware UPX Malicious Library Malicious Packer Antivirus OS Processor Check PE File PE32 PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Remote Code Execution Cryptographic key 		1 2 2 10.0 M 52 ZeroCERT

12816 2023-05-29 13:24 evhic3tm.9uob3.exe  

6df739288df7e77eea4f6fd867d76707


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.8 M 25 ZeroCERT

12817 2023-05-29 10:42 https://www.dropbox.com/s/3oyb...  

d8325c0af6f9618e5646da189c2f5469


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.6 guest

12818 2023-05-29 02:03 https://blitzz.com.ar/wp-conte...  

0d6f6b6bd8f63cb7ea5854d7fb265cb4


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File PNG Format JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.8 guest

12819 2023-05-28 17:20 https://accounts.google.com/v3...  


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		10 8 2 4.2 guest

12820 2023-05-28 14:41 Rebcoana.exe  

edfad6bc3bc4d075a440b49baf575f56


MPRESS PE File PE32 VirusTotal Malware suspicious privilege ComputerName 		3.4 M 54 ZeroCERT

12821 2023-05-28 14:39 tmglobalzx.exe  

924352885feaaa329d4ec33b6b914de0


Loki_b Loki_m Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 2 6 14.4 M 45 ZeroCERT

12822 2023-05-28 14:37 Client.exe  

c246e9024a70360607d9b4ac79a46b67


PWS .NET framework RAT UPX Malicious Library Malicious Packer Antivirus OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 55 ZeroCERT

12823 2023-05-28 14:35 SoundTune.exe  

9619dc496ef114971a0a4fdd55355754


PE64 PE File VirusTotal Malware Malicious Traffic unpack itself DNS 		2 1 1 3.6 M 11 ZeroCERT

12824 2023-05-28 14:33 toolspub3.exe  

4cbbbf1e2c9eb59f3cded9ae490d83e8


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		7.0 M 33 ZeroCERT

12825 2023-05-28 14:30 Azure_Cracked.exe  

08419affda8d3d7d65ff3897e726a819


PWS .NET framework RAT Hide_EXE UPX Malicious Library OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself WriteConsoleW ComputerName 		2.6 M 35 ZeroCERT

keyword