popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13276 2023-05-15 10:38 .rels  

77bf61733a633ea617a4db76ef769a4d


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 guest

13277 2023-05-15 10:38 .rels  

77bf61733a633ea617a4db76ef769a4d


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

13278 2023-05-15 10:38 [Content_Types].xml  

d392bb3733b38ef8a29301ec15c1b348


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

13279 2023-05-15 10:36 [Content_Types].xml  

d392bb3733b38ef8a29301ec15c1b348


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

13280 2023-05-15 08:55 bild6.exe  

21eab81729333b160786a2de1b1e621d


RedLine stealer[m] PWS .NET framework RAT Generic Malware Downloader UPX Malicious Library Antivirus Confuser .NET Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP Key Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Telegram AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder WriteConsoleW IP Check installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key crashed 		2 8 5 14.8 M 52 ZeroCERT

13281 2023-05-15 08:53 baz_uniq.exe  

6330864da59c02a1f1b1f115b2ef8f03


Gen1 MPRESS UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Telegram MachineGuid Malicious Traffic Check memory WMI Creates executable files unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare sandbox evasion VMware anti-virtualization installed browsers check Tofsee Windows Browser Email ComputerName Firmware DNS Software crashed 		5 6 4 14.4 26 ZeroCERT

13282 2023-05-15 08:47 Widgets.exe  

f0016739c32ff1b375e9bf3008a56991


Gen2 Gen1 RAT Generic Malware UPX Malicious Library Malicious Packer Antivirus HTTP PWS[m] Http API Internet API AntiDebug AntiVM OS Processor Check CAB .NET EXE PE File PE32 Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process Windows ComputerName DNS Cryptographic key crashed 		2 1 1 11.0 M 22 ZeroCERT

13283 2023-05-14 17:48 windows.exe  

c159fc653a86ef3eab80e5d06b9cfa2c


Formbook Gen1 Gen2 email stealer Generic Malware UPX Malicious Library Antivirus ASPack Malicious Packer PWS[m] Steal credential ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 PowerShell OS Processor Check DLL ZIP Format BMP Format icon Browser Info Stealer Malware download Wshrat NetWireRC VirusTotal Email Client Info Stealer Malware VBScript AutoRuns suspicious privilege Check memory Checks debugger WMI wscript.exe payload download Creates shortcut Creates executable files unpack itself Windows utilities malicious URLs AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check human activity check Tofsee Ransomware Interception Windows Houdini Browser Email ComputerName DNS Cryptographic key DDNS Dropper 		13 9 8 10.0 M 39 ZeroCERT

13284 2023-05-14 17:47 vbc.exe  

433b617e1991fb112c8aabfc41eb0b8d


PWS .NET framework Formbook Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 13.0 M 46 ZeroCERT

13285 2023-05-14 17:46 vbc.exe  

72f99c537d61d38a113e121348cce0dd


NSIS UPX Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder ComputerName 		10 7 2 5.2 M 49 ZeroCERT

13286 2023-05-14 17:43 ProtonVPN_3.0.5.exe  

c5e15dbab0811bd42a6e4d62132ff459


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 55 ZeroCERT

13287 2023-05-14 17:40 ppls25.exe  

a14d01d96ea78f39f7e118582dad3cb9


Gen2 Gen1 UPX Malicious Library PE64 PE File VirusTotal Malware PDB Remote Code Execution DNS 		1 2.0 M 32 ZeroCERT

13288 2023-05-14 17:36 adminfunction.ps1  

116867a52a3e60cc2eb90e5888a70cdd


Generic Malware Antivirus powershell Check memory unpack itself powershell.exe wrote WriteConsoleW Windows Cryptographic key 		1 2.2 ZeroCERT

13289 2023-05-14 17:36 loc.ps1  

d7bd6a17466dbe1e448956b0018ad94d


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.8 2 ZeroCERT

13290 2023-05-14 17:34 builds  

7d55ec6eb0d0d539f72efdeb800ad5bd


PWS .NET framework RAT Generic Malware UPX Malicious Packer OS Processor Check .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege MachineGuid Check memory Checks debugger unpack itself 		2.8 M 46 ZeroCERT

keyword