popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13351 2023-05-11 09:08 Lscwklt.js  

72794cef000741d517cab446ccb3b4e6


Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key 		1 6.2 ZeroCERT

13352 2023-05-11 09:08 Aqrwa.js  

92fae833978ae39133e33b9c17d782ec


Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key 		6.2 ZeroCERT

13353 2023-05-10 18:57 vbc.exe  

24429aa11d39dddc2e9daec4bcba9ed0


Formbook KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Telegram PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser ComputerName DNS crashed keylogger 		2 4 9.6 M ZeroCERT

13354 2023-05-10 18:56 vbc.exe  

953db0fa8e971527b18ae9abc387f7a2


Formbook KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed keylogger 		9.6 M 25 ZeroCERT

13355 2023-05-10 18:40 QQQQQ%23%23%23%23%23%23%23%23%...  

74f63aa2d67f8c772a62b45904c46caf


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Telegram Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Windows Exploit DNS crashed Downloader 		1 3 11 4.8 M 29 ZeroCERT

13356 2023-05-10 18:21 PO.exe  

c884d60fea6f63974e134023a934894a


AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		10 12 2 8.6 M 12 ZeroCERT

13357 2023-05-10 18:18 build.exe  

c9baa6f493c047ea988df511eae16cc8


PWS .NET framework RAT UPX OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 5.2 M 64 ZeroCERT

13358 2023-05-10 18:16 path  

7fc09e90a6b01b4e45dfb74a398ab841


PWS .NET framework RAT UPX Malicious Library VMProtect OS Processor Check PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger Creates executable files unpack itself AppData folder Remote Code Execution DNS 		1 6.0 M 36 ZeroCERT

13359 2023-05-10 18:16 vbc.exe  

992a0de4e5038847edbe7f400f3ccfd2


Formbook NSIS UPX Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder DNS 		21 25 2 20 6.2 M 36 ZeroCERT

13360 2023-05-10 18:12 loki.exe  

49f6547db1a057139da206876f7cac86


Generic Malware UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 32 ZeroCERT

13361 2023-05-10 18:11 MON_pdf.exe  

b1779162ee18fdff9a550e23bec9b2c4


NSIS UPX Malicious Library PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 7.4 M 48 ZeroCERT

13362 2023-05-10 18:09 Wed.exe  

f92115170bf02c0ac2f6b1e7270dcfb6


Formbook .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger buffers extracted unpack itself 		2.4 M 17 ZeroCERT

13363 2023-05-10 18:09 vbc.exe  

6ade942d85d1738a7d52360ca1d34080


Generic Malware UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		3.8 M 32 ZeroCERT

13364 2023-05-10 18:07 %23%23%23%23%23%23%23%23%23%23...  

41e6396e3fb7c2ee5676acd85978f671


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash IP Check Tofsee Windows Exploit DNS crashed Downloader 		2 3 7 5.4 M 30 ZeroCERT

13365 2023-05-10 18:07 aaaa.exe  

852e911a70f5f4ebdf572adc36cb97f6


AntiDebug AntiVM MSOffice File Code Injection ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		6 2 6.0 M ZeroCERT

keyword