popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13336 2023-05-11 18:48 SecHorST.exe  

bec821cc9ca7762dd50f48d0cf4344cd


Generic Malware UPX Malicious Library OS Processor Check MZP Format PE File PE32 PE64 VirusTotal Malware Checks debugger unpack itself AppData folder AntiVM_Disk VM Disk Size Check 		3.0 M 34 ZeroCERT

13337 2023-05-11 18:46 HalogenSySCheck.exe  

1987b8ce233909021e877ea3408ccb70


RAT .NET EXE PE File PE32 VirusTotal Malware Telegram Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS crashed 		2 4 2.8 M 29 ZeroCERT

13338 2023-05-11 18:44 frank.jpg  

b087d2cba334e315c16c893e0709b14c


PWS .NET framework RAT UPX Confuser .NET OS Processor Check .NET EXE PE File PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		1 7.0 M 53 ZeroCERT

13339 2023-05-11 18:42 Build1.exe  

bfaa027a645e567824a10a26fb8dbefd


RAT Emotet PWS .NET framework Loki_b UPX .NET EXE PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Windows ComputerName DNS Cryptographic key 		15 5 5 6.6 M 35 ZeroCERT

13340 2023-05-11 18:42 Build-1S.exe  

e695b8888af3b57f1a56961bd289463c


Emotet PWS .NET framework Loki_b RAT UPX OS Processor Check .NET EXE PE File PE32 VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Windows ComputerName DNS Cryptographic key 		15 5 1 5.6 M 54 ZeroCERT

13341 2023-05-11 18:42 QQQQ%23%23%23%23%23%23%23%23%2...  

f908218ac1828a12fb1972d54fddf1ec


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed Downloader 		1 2 3 4.6 M 30 ZeroCERT

13342 2023-05-11 18:42 Build2.exe  

2746fd51855e750aa6b52dd72bca0cb0


RAT .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.0 M 18 ZeroCERT

13343 2023-05-11 18:41 AnyDesk.exe  

1c6e08b5f03c0c7d1455f082b1b02c64


Gen1 Generic Malware UPX Malicious Library Antivirus Malicious Packer OS Processor Check PE File PE32 DLL Browser Info Stealer Malware download AveMaria NetWireRC VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Windows Browser RAT Email ComputerName DNS Cryptographic key 		3 2 12.4 M 52 ZeroCERT

13344 2023-05-11 18:40 tst2.exe  

092d064fa7c8b7c292462d00eb149265


Malicious Library PE64 PE File Cryptocurrency Miner Cryptocurrency DNS 		2 2 0.4 M ZeroCERT

13345 2023-05-11 09:21 NDA_D753_May_10.wsf  

8624646d76bcbcc599c9321fb06cddd1

Malware VBScript Malicious Traffic WMI heapspray wscript.exe payload download ComputerName DNS Dropper 		6 6 10.0 ZeroCERT

13346 2023-05-11 09:21 NDA_D673_May_10.wsf  

883bbc5030fbf590ef98edc18c49565b

Malware VBScript Malicious Traffic WMI heapspray wscript.exe payload download ComputerName DNS Dropper 		6 6 10.0 ZeroCERT

13347 2023-05-11 09:16 koIWDRc.exe  

c0578edb37d43cc63a01b287436f4e67


Generic Malware Suspicious_Script_Bin UPX Malicious Library Antivirus Anti_VM MZP Format PE File PE32 BMP Format OS Processor Check VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key 		1 6.4 16 ZeroCERT

13348 2023-05-11 09:15 photo_570.exe  

9521fd6fc4a58dd4ae3c47d95eb91557


Gen1 Emotet PWS .NET framework RAT UltraVNC UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer Confuser .NET CAB PE File PE32 OS Processor Check DLL .NET EXE Browser Info Stealer Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		6 2 6 3 16.0 M ZeroCERT

13349 2023-05-11 09:11 i.exe  

5093a300dc7623ead1d35860a6312011


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.4 M 55 ZeroCERT

13350 2023-05-11 09:08 Yezmtqs.js  

353e7a94b3f5723043d83640fe5d85fd


Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key 		1 6.2 ZeroCERT

keyword