popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12916 2023-05-25 09:33 ijijijijijijijijijijiji%23%23%...  

d251d3dc70ec562e6e92ac28c05f1aa9


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed 		1 1 5 5.0 M 31 ZeroCERT

12917 2023-05-25 09:31 hussanzx.exe  

b40484b0048fc319745734e99446d4d5


Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 5 15.0 M 41 ZeroCERT

12918 2023-05-25 09:31 Otisdssd.exe  

f89e45ac209d202a8f38df822afbd71c


RAT .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		1.8 M 17 ZeroCERT

12919 2023-05-25 09:29 INT_CACHE.exe  

2fedad2f88722142df214c3f34e00708


Loki_b Loki_m Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 13.6 M 30 ZeroCERT

12920 2023-05-25 09:29 INT_CACHE.exe  

0be154b22d831552551fc0bc74aae9dc


Loki Loki_b Loki_m Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.2 M 30 ZeroCERT

12921 2023-05-25 08:17 IE_NETWORK.exe  

25d283fc68f2c655fa23ad84525e7f20


Formbook Generic Malware Antivirus PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		12 13 3 11 11.2 M 17 ZeroCERT

12922 2023-05-25 07:52 ijijijijiijijijiiji%23%23%23%2...  

475d254427357e852f35dee44ff69d57


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed 		12 12 9 10 4.8 M 29 ZeroCERT

12923 2023-05-25 07:45 a0UFMZnC6ltxphw.dat  

9c62d0040b9577c8484377357f673dc6


UPX Malicious Library AntiDebug AntiVM OS Processor Check DLL PE File PE32 Buffer PE PDB Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself sandbox evasion Browser ComputerName crashed 		6.6 M ZeroCERT

12924 2023-05-24 19:38 IE_CACHES.exe  

0b7de5ae22b768e277f8d6be97291ce0


Generic Malware UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.8 M 27 ZeroCERT

12925 2023-05-24 19:06 IE_NET_CACHE.exe  

ddbead253591c7f1106ac6ad48367df9


Generic Malware UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL PE64 PNG Format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		3.0 M 30 ZeroCERT

12926 2023-05-24 18:52 po-docs-may24.exe  

14d2501921d7cf94f36f5deb78c93982


UPX Malicious Library Admin Tool (Sysinternals etc ...) MZP Format PE File PE32 VirusTotal Malware RWX flags setting unpack itself Check virtual network interfaces Tofsee crashed 		2 4 1 3.4 23 ZeroCERT

12927 2023-05-24 18:43 File.7z  

6eaee08cad156f12d3c3fbe4329c5d81


MPRESS PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself IP Check Tofsee DNS 		5 13 2 2 4.2 M 3 ZeroCERT

12928 2023-05-24 18:34 Install.7z  

a44c305a1e65c789d98af4ac9821cd3b


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check Tofsee DNS 		5 11 2 2 4.2 M ZeroCERT

12929 2023-05-24 18:28 build2.exe  

2a232439bc6ecde0d0c5e85aa3ad04fc


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 3.0 M 50 ZeroCERT

12930 2023-05-24 18:26 smithempirezx.exe  

25641d1ceaa404b8ec80748246ac767d


SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 2 11.2 M 24 ZeroCERT

keyword