popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13126 2023-05-19 15:15 2.exe  

294fab1523dc3b50cbcc120e67946a5b


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware DNS 		1 3.4 M 56 guest

13127 2023-05-19 12:29 http://5.34.178.166/pixel.gif  

d89746888da2d9510b64a9f031eaecd5


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 1 2 5.2 BRY

13128 2023-05-19 10:44 96d2a306fe192ca9__e5azbew.dll  

dd68d626a562cf34f8051a53d16fcb89


.NET DLL DLL PE File PE32 PDB 		0.2 ZeroCERT

13129 2023-05-19 10:33 1300.exe  

f3b80e952acfb2c3df34987be8b79b7a


RedLine stealer[m] PWS .NET framework Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 10.6 M 33 ZeroCERT

13130 2023-05-19 10:31 phcs05_r.bin  

2da5816578795be004ad5d4190276a7f


RAT AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.0 12 ZeroCERT

13131 2023-05-19 10:31 runlastrun.ps1  

81424820bdf139b1fe3de3faa4e98ae6


Generic Malware Antivirus .NET DLL DLL PE File PE32 VirusTotal Malware Check memory buffers extracted Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows Cryptographic key crashed 		1 4.4 8 ZeroCERT

13132 2023-05-19 10:31 runrunlastrun.vbs  

9e2d09f47cc48dd3e84205376a8f9ecb


Antivirus VirusTotal Malware AutoRuns MachineGuid WMI Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		1 6.4 18 ZeroCERT

13133 2023-05-19 01:22 verticalScroll.xml  

af484e7ba504dca73f2b485c0b6ce336


AntiDebug AntiVM MSOffice File Code Injection buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		4.6 BRY

13134 2023-05-18 17:49 FFF%23%23%23%23%23%23%23%23%23...  

9ca19a2bb25f1dcc1e663820ef9903e1


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed Downloader 		1 1 3 5.0 M 33 ZeroCERT

13135 2023-05-18 17:36 GGG%23%23%23%23%23%23%23%23%23...  

01c2fe220d602996255a3760b10a1219


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed Downloader 		1 1 3 5.0 M 33 ZeroCERT

13136 2023-05-18 15:41 cryptoistic.bin  

d41d8cd98f00b204e9800998ecf8427e


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

13137 2023-05-18 10:48 vbc.exe  

59f9df6fb26fb1a5c6343a443075649b


Formbook Malicious Library PE File PE32 FormBook Malware download Malware suspicious privilege Malicious Traffic unpack itself DNS 		34 19 4 18 2.4 M ZeroCERT

13138 2023-05-18 09:58 buggzx.exe  

d29862a821bc742d24c346287c79ca1a


Loki_b Loki_m PWS .NET framework Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 15.0 M 31 ZeroCERT

13139 2023-05-18 09:58 jjjj%23%23%23%23%23%23%23%23%2...  

f2af555f26393f34180a3845e92ba1cb


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		22 20 13 2 4.0 M ZeroCERT

13140 2023-05-18 09:54 papilazx.exe  

589fc2b85730cb3a14c1ba64b8a4693d


PWS .NET framework Anti_VM .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself DNS 		1 3.2 M 40 ZeroCERT

keyword