popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13381 2023-05-10 10:09 obi.exe  

07d31d6b30d2925b4664dc957f2235e9


Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 14.0 M 36 ZeroCERT

13382 2023-05-10 10:07 httpsNccapskuh.exe  

fbb4b3a3458a459bb60e1c3e51f8a1f4


ScreenShot AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		7.8 M 51 ZeroCERT

13383 2023-05-10 10:05 vbc.exe  

a4e7abd7fda183a69db7ac1bfc9e18b1


Formbook PWS .NET framework RAT UPX ASPack Malicious Library AntiDebug AntiVM .NET EXE PE32 PE File OS Processor Check FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces Windows ComputerName DNS Cryptographic key crashed 		3 6 1 12.0 M 39 ZeroCERT

13384 2023-05-10 10:02 olotiiss.exe  

3e22ae167ceabafcaa798453a48444fa


PWS .NET framework UPX SMTP KeyLogger AntiDebug AntiVM OS Processor Check .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 11.4 M 45 ZeroCERT

13385 2023-05-10 10:00 Had.exe  

71ae692fbca5a94d85b2a994b4426c4e


PE64 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.0 M 33 ZeroCERT

13386 2023-05-10 10:00 originalbuild.exe  

946640d04e9bc3419f1ca9183e5da8f6


RAT Generic Malware Malicious Library Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 6.4 M 40 ZeroCERT

13387 2023-05-10 09:17 워싱턴선언, 북핵 위협 대응에 얼마나 도움이 될까.ln...  

445e7fd6bb684420d6b8523fe0c55228


Generic Malware Downloader Antivirus Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenShot Hide_URL AntiDebug AntiVM HWP MSOffice File GIF Format .NET VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		3 4 1 10.8 18 ZeroCERT

13388 2023-05-09 19:28 std2.7z  

8c47460fa4cce4ce9c672c5390472e03


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger Creates executable files unpack itself 		2.0 M ZeroCERT

13389 2023-05-09 19:23 103.184.128.244_update.7z  

068a57341223a3d3d024b524cd67df5e


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM SMB Traffic Potential Scan suspicious privilege Check memory Checks debugger Creates executable files ICMP traffic unpack itself DNS 		133 1 3.4 ZeroCERT

13390 2023-05-09 19:14 103.40.123.34_update.7z  

f91cf94c3ba6073a885f53e8c32bfa1b


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM SMB Traffic Potential Scan suspicious privilege Check memory Checks debugger Creates executable files unpack itself DNS 		276 1 2.6 ZeroCERT

13391 2023-05-09 18:59 update.7z  

c9027a96969b77612260fd952c632a54


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM SMB Traffic Potential Scan suspicious privilege Check memory Checks debugger Creates executable files unpack itself DNS 		131 1 2.6 M ZeroCERT

13392 2023-05-09 18:51 update.7z  

c9027a96969b77612260fd952c632a54


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself 		1.6 M ZeroCERT

13393 2023-05-09 18:48 update.7z  

c9027a96969b77612260fd952c632a54

 M ZeroCERT

13394 2023-05-09 18:45 098.hta  

246b0b1de71eeffbb03fa02ccf9c0621


Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 6.0 ZeroCERT

13395 2023-05-09 18:33 %23%23%23%23%23%23%23%23%23%23...  

18418b8b5e1ee58eba592c4b23abc28b


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed Downloader 		1 1 3 4.6 M 33 ZeroCERT

keyword