popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14266 2023-03-24 18:20 30..................30...........  

f3f27539efc7350df9dc444676687f9b


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		1 1 7 4.6 M 31 ZeroCERT

14267 2023-03-24 18:19 ndt5tk.exe  

9ce5895cf7087cd578519a76e9eadb7c


UPX Malicious Library PWS[m] AntiDebug AntiVM OS Processor Check PE32 PE File VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself ComputerName crashed 		7.6 M 32 ZeroCERT

14268 2023-03-24 18:18 rc.exe  

50e9958bb2a5b6ae6ed8da1b1d97a5bb


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE32 PE File GIF Format Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger WMI Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser ComputerName 		3 2 10.2 M 32 ZeroCERT

14269 2023-03-24 18:17 20...............................  

3d64a167c2f313bac10c89b3d591be13


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting 		2.6 M 30 ZeroCERT

14270 2023-03-24 18:15 1.vbs  

0302835269c55903e8af7326a27ca898


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 M 2 ZeroCERT

14271 2023-03-24 18:15 vbc.exe  

1207e0b55db1b38405c49fc57209fc38


PWS .NET framework RAT UPX .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself DNS crashed 		1 3.2 M 33 ZeroCERT

14272 2023-03-24 18:13 vbc.exe  

1651e40eaf343b2e9ceaea5f1aef2fae


NPKI RAT UPX PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		1.6 M 29 ZeroCERT

14273 2023-03-24 18:12 huilang.exe  

f1ec2cf6256a7c8543586065a07da47a


UPX PE32 PE File Malware download VirusTotal Open Directory Malware AutoRuns Malicious Traffic Check memory Creates executable files RWX flags setting AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Windows Exploit Browser DNS 		1 8 9.4 M 56 ZeroCERT

14274 2023-03-24 18:12 creal.exe  

2120b49043ad53c0a73cbf60bc110f8e


Gen1 Emotet Generic Malware UPX Malicious Library Anti_VM Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE64 PE File DLL ZIP Format VirusTotal Malware Check memory Creates executable files 		2.2 M 34 ZeroCERT

14275 2023-03-24 18:11 vbc.exe  

52960f977b511bb88664a0177320a26a


PWS .NET framework RAT Generic Malware Antivirus .NET EXE PE32 PE File VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.4 M 28 ZeroCERT

14276 2023-03-24 18:10 1.vbs  

8207f9bb21566a55e65885d18172fe00


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 2 ZeroCERT

14277 2023-03-24 18:09 98.exe  

719082dcc3c017e5b675c8b9ec74b6a1


RedLine stealer[m] UPX Malicious Library AntiDebug AntiVM OS Processor Check PE32 PE File Browser Info Stealer FTP Client Info Stealer Buffer PE PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Collect installed applications AntiVM_Disk IP Check VM Disk Size Check installed browsers check Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		3 12.6 M ZeroCERT

14278 2023-03-24 17:51 ndt5tk.exe  

9ce5895cf7087cd578519a76e9eadb7c


UPX Malicious Library PWS[m] AntiDebug AntiVM OS Processor Check PE32 PE File VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself ComputerName crashed 		7.6 32 ZeroCERT

14279 2023-03-24 11:31 svchost.exe  

8ec922c7a58a8701ab481b7be9644536


Gen2 Gen1 UPX Malicious Packer PE64 PE File PDB Remote Code Execution 		0.6 guest

14280 2023-03-24 09:47 vbc.exe  

b9e1bfbf09491bfb164214ce2618acb7


UPX Malicious Library PE32 PE File VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		22 24 1 19 4.4 M 34 ZeroCERT

keyword