popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14296 2023-04-05 08:45 toolspub2.exe  

30e9eeb70c21208690eafa461560b203


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE32 PE File Malware Code Injection Checks debugger buffers extracted unpack itself Remote Code Execution 		6.0 ZeroCERT

14297 2023-04-05 08:44 omo.exe  

5288674c2d9557bd89a0aab4869f1f60


PWS .NET framework RAT Generic Malware UPX Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key crashed 		4 7 1 13.4 M 30 ZeroCERT

14298 2023-04-05 08:42 fotocr14.exe  

2dcb47fdf1d84aeb14d68a2c1b901ac1


Gen1 Emotet UPX Malicious Library CAB PE32 PE File Browser Info Stealer FTP Client Info Stealer AutoRuns PDB suspicious privilege Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Disables Windows Security Collect installed applications AntiVM_Disk VM Disk Size Check installed browsers check Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 10.4 ZeroCERT

14299 2023-04-05 08:30 Photocopies.exe  

2f5769f336565444ad1b4725b55d6dc9


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself crashed 		2.6 49 ZeroCERT

14300 2023-04-05 07:25 UpdateGroup.exe  

97acdf48c972303f1c68bffb21f7531d


RAT Generic Malware UPX Antivirus .NET EXE PE32 PE File VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself AppData folder installed browsers check Windows Browser ComputerName crashed keylogger 		6.4 M 46 ZeroCERT

14301 2023-04-05 06:52 buildcr.exe  

33a45fcbca9c96cf4d9f456d27d87820


RAT Gen2 UPX Malicious Library Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE32 PE File OS Processor Check VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		9.4 M 49 guest

14302 2023-04-04 17:28 SystemUpdate.exe  

09a29f3b529c5e9ab25a47973bb0900a


PWS .NET framework RAT Generic Malware Confuser .NET Antivirus UPX Malicious Library Malicious Packer .NET EXE PE32 PE File OS Processor Check PE64 VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Auto service powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Firmware DNS Cryptographic key 		6 7 2 2 12.0 M 52 ZeroCERT

14303 2023-04-04 17:27 blez.exe  

ba6e7557d1090cc6d6091cafb984e4b5


PWS .NET framework RAT Generic Malware UPX Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		2 4 1 11.2 M 11 ZeroCERT

14304 2023-04-04 17:24 buildcr.exe  

33a45fcbca9c96cf4d9f456d27d87820


RAT Gen2 UPX Malicious Library Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE32 PE File OS Processor Check VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		9.8 M 31 ZeroCERT

14305 2023-04-04 17:22 vbc.exe  

867334824fc516494ef38ac031998877


PWS .NET framework RAT Generic Malware UPX Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		2 4 2 12.2 M 33 ZeroCERT

14306 2023-04-04 17:22 ytsd6v.exe  

cc6caf2c7b27fe45d8a148e1e9af9aae


RedLine stealer[m] UPX Malicious Library AntiDebug AntiVM OS Processor Check PE32 PE File VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		1 9.0 M 54 ZeroCERT

14307 2023-04-04 17:20 vbc.exe  

8b817b79a103307dcd00a353e6bc13ac


RAT UPX AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD Windows DNS Cryptographic key 		10 12 6 9.0 M 36 ZeroCERT

14308 2023-04-04 17:20 rocketscamjesus.exe  

065b5810275d9f18cb2724096f96a160


PWS .NET framework RAT UPX OS Processor Check .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 7.6 M 54 ZeroCERT

14309 2023-04-04 17:19 ContinentGroufs.exe  

7b789842cbf26efdbe8a0c4d33a1745d


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 59 ZeroCERT

14310 2023-04-04 17:18 sBJ42BUkUv.exe  

af16c9b8a8ca0b632d9ca91a8411ec57


RedLine stealer[m] Generic Malware Downloader Malicious Library Antivirus Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenShot AntiDebug AntiVM PE64 P Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security Checks Bios Collect installed applications Detects VirtualBox suspicious process WriteConsoleW VMware anti-virtualization installed browsers check Windows Browser Advertising ComputerName DNS Cryptographic key Software crashed 		1 21.2 M 34 ZeroCERT

keyword