popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14041 2023-04-04 17:28 SystemUpdate.exe  

09a29f3b529c5e9ab25a47973bb0900a


PWS .NET framework RAT Generic Malware Confuser .NET Antivirus UPX Malicious Library Malicious Packer .NET EXE PE32 PE File OS Processor Check PE64 VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Auto service powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Firmware DNS Cryptographic key 		6 7 2 2 12.0 M 52 ZeroCERT

14042 2023-04-04 17:27 blez.exe  

ba6e7557d1090cc6d6091cafb984e4b5


PWS .NET framework RAT Generic Malware UPX Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		2 4 1 11.2 M 11 ZeroCERT

14043 2023-04-04 17:24 buildcr.exe  

33a45fcbca9c96cf4d9f456d27d87820


RAT Gen2 UPX Malicious Library Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE32 PE File OS Processor Check VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		9.8 M 31 ZeroCERT

14044 2023-04-04 17:22 vbc.exe  

867334824fc516494ef38ac031998877


PWS .NET framework RAT Generic Malware UPX Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		2 4 2 12.2 M 33 ZeroCERT

14045 2023-04-04 17:22 ytsd6v.exe  

cc6caf2c7b27fe45d8a148e1e9af9aae


RedLine stealer[m] UPX Malicious Library AntiDebug AntiVM OS Processor Check PE32 PE File VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		1 9.0 M 54 ZeroCERT

14046 2023-04-04 17:20 vbc.exe  

8b817b79a103307dcd00a353e6bc13ac


RAT UPX AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD Windows DNS Cryptographic key 		10 12 6 9.0 M 36 ZeroCERT

14047 2023-04-04 17:20 rocketscamjesus.exe  

065b5810275d9f18cb2724096f96a160


PWS .NET framework RAT UPX OS Processor Check .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 7.6 M 54 ZeroCERT

14048 2023-04-04 17:19 ContinentGroufs.exe  

7b789842cbf26efdbe8a0c4d33a1745d


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 59 ZeroCERT

14049 2023-04-04 17:18 sBJ42BUkUv.exe  

af16c9b8a8ca0b632d9ca91a8411ec57


RedLine stealer[m] Generic Malware Downloader Malicious Library Antivirus Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenShot AntiDebug AntiVM PE64 P Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VirtualBox suspicious process WriteConsoleW VMware anti-virtualization installed browsers check Windows Browser Advertising ComputerName DNS Cryptographic key Software crashed 		1 21.2 M 34 ZeroCERT

14050 2023-04-04 17:17 105.exe  

7aeb5d13a8d2dacabac7a928c57cf57c


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself 		2.0 M 38 ZeroCERT

14051 2023-04-04 17:15 1bz7KfahvU.exe  

e0d2634fe2b085685f0b71e66ac91ec9


UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware 		2.0 M 51 ZeroCERT

14052 2023-04-04 17:13 0002.exe  

245ef358e384f40caf1c178b4825f029


Malicious Library AntiDebug AntiVM PE32 PE File VirusTotal Malware AutoRuns Code Injection Check memory RWX flags setting unpack itself Windows utilities suspicious process AppData folder Windows DNS 		1 7.8 M 55 ZeroCERT

14053 2023-04-04 17:13 nmooul5hrjbg6.channal1.exe  

b8ff396f094c22492fa957fbcf2d6a94


UPX Malicious Library Malicious Packer OS Processor Check PE32 PE File VirusTotal Malware crashed 		2.0 M 51 ZeroCERT

14054 2023-04-04 11:36 tiny.php  

5f202673a787a640923543a442e150ac


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.8 3 guest

14055 2023-04-04 10:49 tiny.php  

5f202673a787a640923543a442e150ac


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.8 3 guest

keyword