popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14221 2023-03-27 10:42 cc.exe  

41eb3aa33bccbe6a18acfedaf7f93ad5


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Remote Code Execution 		1.8 M 26 ZeroCERT

14222 2023-03-27 10:42 vbc.exe  

03c74286887866a799f7cafdc096efda


PWS .NET framework RAT UPX PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		10 11 3 9.6 M 40 ZeroCERT

14223 2023-03-27 10:41 FRI.exe  

c1b465d96c0541a5dc8e95a7bfd96e15


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself suspicious TLD DNS 		10 24 6 5 6.2 M 38 ZeroCERT

14224 2023-03-27 10:41 Windowsfig.exe  

40528a8ce542af784cb9958552f7798d


Confuser .NET .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.4 M 35 ZeroCERT

14225 2023-03-27 10:39 ox.exe  

cfc3dc40432c7d8d8f838bc20c12bf27


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself crashed 		2.2 M 46 ZeroCERT

14226 2023-03-27 10:37 Nasalized.exe  

4c42520a02966a874eb4fbdc0a74e208


RedLine stealer[m] PWS .NET framework RAT RedLine Stealer Confuser .NET SMTP PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 9.4 M 43 ZeroCERT

14227 2023-03-27 10:34 a.exe  

1dc49de091d11dd75ff77444e1b2e286


UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware crashed 		2.0 M 41 ZeroCERT

14228 2023-03-27 10:33 vbc.exe  

ea36e1f335ddc3b518fb817b92b2f7e9


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		20 22 2 19 4.6 M 47 ZeroCERT

14229 2023-03-27 10:32 Blaubok.exe  

3c62500496bfc4f35d38ddbe71be78c2


RedLine stealer[m] PWS .NET framework RAT RedLine Stealer Confuser .NET SMTP PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 10.4 M 48 ZeroCERT

14230 2023-03-27 10:32 payload.exe  

67e524e151efc62a8f5d3bbf8531e70a


PE64 PE File VirusTotal Malware DNS crashed 		1 3.2 M 54 ZeroCERT

14231 2023-03-27 10:30 Sprawl.exe  

7f9cc3889e95b39a93593207cc823dd2


RedLine stealer[m] PWS .NET framework RAT RedLine Stealer Confuser .NET SMTP PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 10.4 M 48 ZeroCERT

14232 2023-03-27 10:30 update.exe  

93b9f5bf918b7e5de262a85214aa8fea


Generic Malware UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware Malicious Traffic unpack itself ComputerName DNS 		1 2 4.0 M 41 ZeroCERT

14233 2023-03-27 10:28 ooo.bat  

3db5b638d5142dca0d922543ce1099c0


Generic Malware Downloader Antivirus Create Service DGA Socket ScreenShot DNS Internet API Code injection PWS[m] Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges FTP Http API AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 4.0 1 ZeroCERT

14234 2023-03-27 10:28 update-pyt.exe  

ba6a75f0c69a7f22b526ad940c3451b4


Gen2 Generic Malware UPX Malicious Library Antivirus OS Processor Check PE32 PE File JPEG Format Malware download Amadey Malware AutoRuns Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		7 23 6 2 8.2 M ZeroCERT

14235 2023-03-27 10:28 33293939193898579265.bin  

b3c8c890a8a14c823da4fcebb050a8d5


Gen1 UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Windows utilities WriteConsoleW Windows ComputerName crashed 		3.6 M 43 ZeroCERT

keyword