popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14281 2023-03-24 09:46 vx9.txt.ps1  

bbd04ea795c2f48efea24040f42730e6


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.4 M 5 ZeroCERT

14282 2023-03-24 09:45 WinLoad.exe  

12a45205a6da702e56b6a07cbe162445


Gen2 Gen1 Generic Malware UPX Malicious Library Anti_VM OS Processor Check PE64 PE File VirusTotal Malware Creates executable files DNS crashed 		3 2.0 M 23 ZeroCERT

14283 2023-03-24 09:45 writer.bat  

1e30daa4770b00c2e624e8a615e80282


Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection PWS[m] Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges FTP Http API AntiDebug AntiVM powershell Windows utilities suspicious process WriteConsoleW Windows Trojan DNS DDNS DoTNet 		6 2 6 5.8 ZeroCERT

14284 2023-03-24 09:44 1.exe  

7429ee8b83fcbb48fe5b383a6235ac1d


UPX Malicious Library MZP Format PE32 PE File VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces Tofsee Windows 		8 12 2 4 6.2 M 34 ZeroCERT

14285 2023-03-24 09:39 LitPay.exe  

3951f8ad7e0e7682fc0d9d13c9a503c5


Gen1 Emotet UPX Malicious Library CAB PE64 PE File .NET EXE PE32 VirusTotal Malware AutoRuns PDB suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Remote Code Execution Cryptographic key crashed 		4.6 23 ZeroCERT

14286 2023-03-24 09:39 vvd.exe  

ddae367e828d169834f7261f3cba74d2


PWS .NET framework RAT UPX .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName DNS 		1 2.4 M 21 ZeroCERT

14287 2023-03-24 09:37 vbc.exe  

7ff571e8d43bdefd4fb9ca3177dfbc7e


PWS .NET framework RAT Generic Malware Antivirus SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		12.6 M 29 ZeroCERT

14288 2023-03-24 09:37 vbc.exe  

953f34884877d4946480bb967d355f69


PWS .NET framework RAT AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		10 11 3 8.4 M 19 ZeroCERT

14289 2023-03-24 09:37 85...............................  

c3e8b482ed3986690fcdc9cbab9a0b7f


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		1 7 4.4 M 27 ZeroCERT

14290 2023-03-24 09:34 vbc.exe  

8301d3d1a602b5aa7e72a57fb20d1a57


PWS .NET framework RAT UPX .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.4 M 37 ZeroCERT

14291 2023-03-24 09:34 b.pif  

424811420bb77c6b2aeee8fd5fd651e0


PWS .NET framework RAT Generic Malware Antivirus SMTP PWS[m] KeyLogger PDF AntiDebug AntiVM .NET EXE PE32 PE File ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion WriteConsoleW IP Check VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		7 3 6 1 20.2 M 20 ZeroCERT

14292 2023-03-24 09:34 1.vbs  

670a6c9ab0f89a768738fe10a8b06982


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.8 1 ZeroCERT

14293 2023-03-24 08:41 presetbodyqualitydebris.hbaked...  

3627dcbbcd0be2ce4f53d3e05c77d9eb


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

14294 2023-03-23 18:47 INV.exe  

d826f8c8edb9b4eea8ee18fa75572490


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself suspicious TLD DNS 		24 25 4 4.6 M 29 ZeroCERT

14295 2023-03-23 18:45 ss47.exe  

44d59cf2b7e4700b703e95eaa7fdbdc7


UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File Browser Info Stealer VirusTotal Malware PDB MachineGuid Malicious Traffic buffers extracted unpack itself Check virtual network interfaces Tofsee Browser Remote Code Execution 		5 6 2 5.2 M 17 ZeroCERT

keyword