popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13981 2023-04-08 06:31 Comcast_HotSpot_NextGenPeopleS...  

4d8dc60169d7caa641d0ae52053405ff


PDF 		guest

13982 2023-04-08 05:51 JoSetp.exe  

ed59308f9e2b59ec4195a99788cee8ee


Confuser .NET .NET EXE PE32 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Ransomware DNS 		3 3 3.6 M 57 guest

13983 2023-04-07 18:25 VoiceControlEngine.exe  

aa57f0d7a099773175006624cc891b29


PWS .NET framework RAT Generic Malware UPX Antivirus HTTP Http API Internet API AntiDebug AntiVM .NET EXE PE32 PE File Malware download VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AppData folder Windows ComputerName DNS Cryptographic key crashed 		2 1 1 2 14.6 M 34 ZeroCERT

13984 2023-04-07 18:24 Updater.exe  

6fa2a8de3fc30b9c80d12c2ac4ad2e3f


PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency DNS CoinMiner 		4 2 1.6 M 51 ZeroCERT

13985 2023-04-07 18:02 Impulse.exe  

951ac38437711fc0c4fc6268250a823d


Gen1 UPX Malicious Library OS Processor Check PE64 PE File DLL ZIP Format VirusTotal Malware Check memory Creates executable files crashed 		1.8 M 22 ZeroCERT

13986 2023-04-07 17:59 auz.jar  

fe4b915fc460a3efc2475946a62bc86a


ZIP Format AutoRuns suspicious privilege Check memory WMI RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process Windows Java ComputerName crashed 		1 6 2 4.8 ZeroCERT

13987 2023-04-07 17:57 1004234865.exe  

8d2f112db11626030db59b4177770991


PE64 PE File VirusTotal Malware crashed 		2.2 M 41 ZeroCERT

13988 2023-04-07 17:57 CC.exe  

0abca5a76379dc774f4c133a177cde59


NPKI Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware crashed 		1.4 M 47 ZeroCERT

13989 2023-04-07 17:45 20230406.exe  

7875c200c4659e920e9c5091a34bc10e


Gen2 Downloader UPX Malicious Library Antivirus ASPack ScreenShot AntiDebug AntiVM OS Processor Check PE32 PE File JPEG Format DLL PE64 VirusTotal Malware Code Injection Check memory Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		4.8 9 guest

13990 2023-04-07 16:40 server.exe  

bb8563b2aa2335abe99a45888e2a47d1


UPX Malicious Library Malicious Packer Antivirus OS Processor Check PE32 PE File VirusTotal Malware Check memory suspicious TLD sandbox evasion Browser DNS 		2 1 2.8 M 57 ZeroCERT

13991 2023-04-07 13:08 document.wflow  

e4bf82ac50b2927b6cf58157f3533173


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 BRY

13992 2023-04-07 09:29 Kcx.wsf  

09aa1bb82cf6ef97e2ae293771003980


Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key 		10 5.6 ZeroCERT

13993 2023-04-07 09:29 RP_April_pJ(8037).wsf  

37f6eccdb016d869bf3b87e6a8e0cf90


Generic Malware Antivirus AntiDebug AntiVM powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key 		6 5.6 ZeroCERT

13994 2023-04-07 09:28 RP_April_Ahw(92).wsf  

94716ca9675a68da4e7fd4d9a878767f


Generic Malware Antivirus AntiDebug AntiVM suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key 		6 5.6 ZeroCERT

13995 2023-04-07 09:12 crypt.exe  

2936c28076b8434601dba5322b3bef97


UPX Malicious Library PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 6 10.8 M 44 ZeroCERT

keyword