popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13726 2023-04-21 09:01 SSR LIST QINQDAO PORT.vbs  

d33e8ab673db0b0e84cc39d0be377bc8


VirusTotal Malware crashed 		0.6 3 ZeroCERT

13727 2023-04-21 09:01 invoice-73928_pdf.vbs  

1aa6621465a6e13c232d8dcd2a01d363


unpack itself crashed 		0.6 ZeroCERT

13728 2023-04-21 08:58 Complaint_Copy_195040.wsf  

9ebb0b07e289a4882ba12b0e7549d064


VBScript wscript.exe payload download DNS Dropper 		1 1 10.0 ZeroCERT

13729 2023-04-21 08:58 Payment_260127.wsf  

ad5e7053e14384edd2d8af5164d9f7bf


VBScript wscript.exe payload download ICMP traffic DNS Dropper 		1 1 10.0 ZeroCERT

13730 2023-04-21 08:54 Lyla131.exe  

17e36437bd558374106622b7327a2aca


RAT NSIS Generic Malware UPX Malicious Library AntiDebug AntiVM PE32 PE File MSOffice File PNG Format .NET EXE OS Processor Check DLL JPEG Format .NET DLL VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security Check virtual network interfaces AppData folder Tofsee Interception Windows Exploit Browser Google DNS Cryptographic key crashed 		3 6 3 12.4 M 21 ZeroCERT

13731 2023-04-21 00:15 chat.db-shm  

87152bb0f7d1d6bdaf6f98e1dc85e487


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 BRY

13732 2023-04-21 00:10 nickNameKeyStore.db  

8f9ca4973e39e548b0236366b99c81de

 BRY

13733 2023-04-20 23:34 1beb05868ce93bcc8fafc46adccdda...  

9b63e0fb3785ffa49686dd75e303d177


AntiDebug AntiVM MSOffice File Code Injection buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		4.2 BRY

13734 2023-04-20 23:21 5F3E84AE-45EF-4856-A65F-8595C0...  

915fdbd6c8acde570bc3f845be59df0c


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 BRY

13735 2023-04-20 21:37 microsoft.office.smartlookup.s...  

6b641f0499f31fa07001adf331bb415d


Anti_VM crashed 		0.2 BRY

13736 2023-04-20 21:29 microsoft.office.smartlookup.s...  

6b641f0499f31fa07001adf331bb415d


Anti_VM crashed 		0.2 BRY

13737 2023-04-20 18:49 blessed.exe  

901454073fbc77ac0854e0d7b9d37214


PWS .NET framework Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 11.4 M 43 ZeroCERT

13738 2023-04-20 18:47 haddd.exe  

295d168271a2ac16dd17c7b5113876e9


Loki_b Loki_m RAT Generic Malware Malicious Library Code injection AntiDebug AntiVM PE64 PE File DLL VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Advertising Cryptographic key crashed 		10.2 20 ZeroCERT

13739 2023-04-20 17:42 vbc.exe  

f742053cbdcec12c128fa08914285311


RAT Malicious Library AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Cryptographic key 		18 19 1 17 9.4 M 47 ZeroCERT

13740 2023-04-20 17:40 vbc.exe  

6242a5f710c22a75e71aa48b4e195e6d


UPX Malicious Library PE32 PE File Formbook FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself 		18 19 3 17 5.4 M 52 ZeroCERT

keyword