popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13141 2023-05-18 09:53 135.exe  

c3359aec2c64c031a1e9f65c6520ed0f


UPX PE File PE32 Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Malicious Traffic Checks debugger buffers extracted unpack itself Collect installed applications sandbox evasion installed browsers check Ransomware Browser ComputerName Firmware DNS crashed 		1 1 1 9.4 M 20 ZeroCERT

13142 2023-05-18 09:50 ASSS%23%23%23%23%23%23%23%23%2...  

047fef24cc2235db39d3eb1551be28bf


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		12 12 12 5.4 M 30 ZeroCERT

13143 2023-05-18 09:48 llaa25.exe  

aec63ca0e90ee3b2f811656ae8747e9e


Gen2 Gen1 Generic Malware Malicious Packer PE64 PE File Browser Info Stealer VirusTotal Malware PDB MachineGuid buffers extracted unpack itself Check virtual network interfaces Tofsee Browser Remote Code Execution crashed 		4 8 2 4.4 M 16 ZeroCERT

13144 2023-05-18 09:47 build.exe  

c82632236e77359b2aaa32e0cc38cd99


Loki_b Loki_m Gen1 Suspicious_Script_Bin Generic Malware UPX Malicious Library Malicious Packer DGA Socket DNS PWS[m] Http API Internet API ScreenShot Code injection AntiDebug AntiVM OS Processor Check PE File PE32 DLL Browser Info Stealer Malware download FTP Client Info Stealer Dridex VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Microsoft Telegram AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser Email ComputerName DNS Software 		8 11 12 4 18.8 M 22 ZeroCERT

13145 2023-05-18 09:45 vbc.exe  

2e84d5556bb37fcecb8cf7942a70606a


PWS .NET framework Generic Malware Antivirus PWS[m] Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		13 13 4 12.4 M 48 ZeroCERT

13146 2023-05-18 09:43 setupcode.exe  

28aa586922822ebcfd3254bb9bae053a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.6 M 29 ZeroCERT

13147 2023-05-18 09:41 buildnew.exe  

15e49c65d2ec8fa2294fa13b91550a0a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.8 M 30 ZeroCERT

13148 2023-05-18 09:41 fred.exe  

49fb581e3d3ed6fbd834aff980244e36


PWS .NET framework Anti_VM .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 43 ZeroCERT

13149 2023-05-18 09:39 Financials-05-16-23-PDF.exe  

03c3f979feffbf02e7ab9a66f9a1f7b4


RAT .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW Tofsee ComputerName 		1 3 1 3.6 M 30 ZeroCERT

13150 2023-05-18 09:38 file2.ps1  

3185d0e0c60786bcbdf7b6f23bc97448


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.0 M 14 ZeroCERT

13151 2023-05-18 09:37 RFQ.exe  

2ee458e3d3211bcf3b5862cae82409c1


PWS .NET framework Generic Malware Antivirus KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Telegram Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 4 4 17.6 M 19 ZeroCERT

13152 2023-05-18 09:36 Firefox.exe  

c0ff2a9d710fc2f524d781dbf2d89e21


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself WriteConsoleW DNS 		1 2.6 M 30 ZeroCERT

13153 2023-05-18 09:35 pay.exe  

9cf450fc0f69cccd0aa1e7059ff464c6


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 8.6 M 47 ZeroCERT

13154 2023-05-18 09:34 62118a05bd8a77a022e12e983a5bac...  

ace375d381a92baa5577d8d95f0164c6


RAT UPX .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 1 3.4 M 35 ZeroCERT

13155 2023-05-18 09:30 Xpksf.js  

5e2971bf4b1665562d4977c003f1187e


Generic Malware Admin Tool (Sysinternals etc ...) Antivirus Hide_URL AntiDebug AntiVM PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 7.0 16 ZeroCERT

keyword