popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14071 2023-04-18 17:37 okes.exe  

2775771aca8f5cdb689354532eba3109


UPX MPRESS PE64 PE File VirusTotal Malware crashed 		2.0 M 41 ZeroCERT

14072 2023-04-18 17:36 Prynt_Stealer_5.6.exe  

c9b42a5736dc621a27af89075e9cd8b4


PWS .NET framework RAT UPX .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.8 M 53 ZeroCERT

14073 2023-04-18 17:35 virus.exe  

43967615d9e0e19bc59d32fdb5afd7e4


RedLine stealer[m] PWS .NET framework RAT Generic Malware Downloader UPX Malicious Library Antivirus Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenS Browser Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs installed browsers check Windows Browser ComputerName DNS Cryptographic key 		1 2 10.2 M 34 ZeroCERT

14074 2023-04-18 17:34 ark.exe  

b5bb2601161911af5e73af89d2010875


PWS .NET framework Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 12.0 M 25 ZeroCERT

14075 2023-04-18 13:36 locacem2.1.exe  

241b78d02640dea21e13c5bb27f3070c


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		12 15 2 11 5.4 M 35 ZeroCERT

14076 2023-04-18 10:49 locacem2.1.exe  

241b78d02640dea21e13c5bb27f3070c


UPX Malicious Library PE32 PE File VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself 		3.2 M 35 r0d

14077 2023-04-18 09:54 paladin.hta  

1788bf59ef4448b60cab56c45cc7cafe


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.6 21 ZeroCERT

14078 2023-04-18 09:48 paladin.hta  

1788bf59ef4448b60cab56c45cc7cafe

VirusTotal Malware crashed 		1.0 21 ZeroCERT

14079 2023-04-18 09:48 rt.php.ps1  

5051d5610215e59183b9f6651d01d6d1


NPKI Generic Malware Antivirus Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.0 ZeroCERT

14080 2023-04-18 09:40 foto0157.exe  

9e887c02dffcda52de09155e7e21e109


Gen1 Emotet UPX Malicious Library CAB PE32 PE File Browser Info Stealer FTP Client Info Stealer AutoRuns PDB suspicious privilege Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 8.2 ZeroCERT

14081 2023-04-18 09:40 Output.exe  

453776b8b812727c5a905d4db70c1935


Gen1 UPX Malicious Library Malicious Packer AntiDebug AntiVM PE32 PE File OS Processor Check DLL Browser Info Stealer VirusTotal Email Client Info Stealer Malware Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Windows Browser Email ComputerName DNS 		8 1 3 10.8 M 26 ZeroCERT

14082 2023-04-18 09:40 File_pass1234.7z  

69ed08a803fe4dcc357817089fcf212d


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger Creates executable files unpack itself 		2.0 ZeroCERT

14083 2023-04-18 09:38 hugo.exe  

85150fc161f06e745f463388cd0fff4f


Themida Packer UPX MPRESS PE64 PE File VirusTotal Malware Remote Code Execution crashed 		2.2 M 23 ZeroCERT

14084 2023-04-17 19:11 pinduoduo.apk  

2eeac5f3be2b27d0af774ead7dd9132e


OS Processor Check ZIP Format VirusTotal Malware 		0.6 10 guest

14085 2023-04-17 18:00 ts.exe  

16f2a3898cdc27798158c9bf35a4eff4


UPX OS Processor Check PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Check memory buffers extracted unpack itself Ransomware Browser DNS Software 		1 4.4 M 57 ZeroCERT

keyword