popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13471 2021-10-13 09:24 tt.exe  

82e8c0c279d95dc0f9ab425cdfeffdec


Generic Malware Antivirus UPX PE File PE32 VirusTotal Malware AutoRuns Creates executable files AppData folder sandbox evasion Windows 		2 7.2 M 50 r0d

13472 2021-10-13 09:25 kazpwnz.exe  

31ded4b963930c83a70e1b7233568609


RAT PWS .NET framework Generic Malware UPX PE File PE32 OS Processor Check .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Windows Browser ComputerName Cryptographic key Software crashed 		1 4 7.8 M 30 ZeroCERT

13473 2021-10-13 09:26 vbc.exe  

e73620259f5ec6d26ed10d9580b91437


UPX Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 43 ZeroCERT

13474 2021-10-13 09:27 wins.exe  

cc0458fa6fb1ba005a27dcaa0c056f1f


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.0 M 26 ZeroCERT

13475 2021-10-13 09:29 .winlogon.exe  

5d388a0651d6bb853ebcd267f3571c6a


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		10.6 32 ZeroCERT

13476 2021-10-13 09:31 dyno.exe  

8fb7b0d584386defa56169e341f6ee64


Generic Malware UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		2.2 M 39 r0d

13477 2021-10-13 09:31 calibn123.html  

dd5903ab68201806363e3d36cbf448fe


Antivirus AntiDebug AntiVM PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		32 17 2 4.2 ZeroCERT

13478 2021-10-13 09:32 vbc.exe  

31e6b247ed09dd570a66dd7e75174c9b


NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 M 21 ZeroCERT

13479 2021-10-13 09:38 roth123123.ps1  

95be9d4c3bc232a56332f26cc8e6e9fe


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself Windows Cryptographic key 		1.2 5 ZeroCERT

13480 2021-10-13 09:38 mv.css.bat  

52bac62fcdd2a91efb199879c7ed9c87


Generic Malware Antivirus DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.4 8 ZeroCERT

13481 2021-10-13 09:42 wiki.txt.html  

30d93f24af177e15f8e1f1ea876bc45e


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 ZeroCERT

13482 2021-10-13 09:44 Macro test.doc  

b60b59d191a6ec82bcd34bbf3798777e


VBA_macro Generic Malware Antivirus MSOffice File VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut RWX flags setting unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 9.8 31 ZeroCERT

13483 2021-10-13 09:44 cma.trf.ps1  

ea3c8e9f45bbf4f60b317741f0b8fefe


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		2.6 M 11 ZeroCERT

13484 2021-10-13 09:47 wiki.txt.js  

30d93f24af177e15f8e1f1ea876bc45e

unpack itself crashed 		0.6 ZeroCERT

13485 2021-10-13 09:54 art-1497103709.xls  

e7f00e7a7976c5139c40307305876e07


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		4 8 2 4.0 guest

keyword