popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14326 2023-03-23 13:06 myp.exe  

ab64460cd667c1964fc0ee034ec60d15


PWS .NET framework RAT UPX OS Processor Check .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 4.8 M 58 ZeroCERT

14327 2023-03-23 13:05 server.exe  

faf3c47c4d784d20688a8cfd37198518


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware AutoRuns PDB suspicious privilege Creates executable files Disables Windows Security Windows DNS 		1 7.8 M 58 ZeroCERT

14328 2023-03-23 13:04 Good.exe  

9086ff963ae98510ea0eb9abad045939


NPKI PWS .NET framework RAT UPX Malicious Packer Code injection AntiDebug AntiVM OS Processor Check .NET EXE PE32 PE File Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Telegram AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser ComputerName DNS 		1 4 5 11.2 M 35 ZeroCERT

14329 2023-03-23 13:03 uu1.exe  

43919d10c09cc339e383f3b62ad9b311


PWS .NET framework RAT North Korea UPX .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.6 18 ZeroCERT

14330 2023-03-23 09:26 atom.xml  

0fcb9115095928eaf98f18f0f65accd1


Hide_EXE PowerShell Script MZ AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 4.2 5 ZeroCERT

14331 2023-03-23 09:26 atom.xml  

a7d44a32fcf911de0dae1b535ca3fa1a


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 4.2 3 ZeroCERT

14332 2023-03-22 18:23 96.exe  

9faea65cff61ad64e4bc4c3913c336be


Cutwail Mali Malware download VirusTotal Malware Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process sandbox evasion Tofsee Windows Backdoor ComputerName Remote Code Execution DNS Cryptographic key 		259 679 6 16.0 M 27 ZeroCERT

14333 2023-03-22 17:33 vbc.exe  

3a02d50415b4f76d02cda80340ecccbe


UPX Malicious Library PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed 		7.0 M 21 ZeroCERT

14334 2023-03-22 17:32 power.exe  

ba218b60cb97c3532b8b9c796d954622


RAT Emotet Gen2 Ave Maria WARZONE RAT Gen1 Generic Malware UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) .NET EXE PE32 PE File OS Processor Check DLL PE64 JPEG Format Malware download Amadey VirusTotal Malware AutoRuns Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS crashed 		6 3 6 6 11.2 M 45 ZeroCERT

14335 2023-03-22 17:31 handdiy_6.exe  

54f8a4c3864f17466705a15a2ef2a06f


Gen2 Trojan_PWS_Stealer Credential User Data Generic Malware UPX Malicious Library SQLite Cookie Malicious Packer Anti_VM OS Processor Check PE32 PE File PNG Format Browser Info Stealer suspicious privilege MachineGuid Code Injection Checks debugger WMI Creates executable files exploit crash Windows utilities suspicious process WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution DNS crashed 		1 4 3 8.2 M ZeroCERT

14336 2023-03-22 17:29 Clip1.exe  

fa0e319484845c1333e5c1e621659027


UPX PE64 PE File VirusTotal Malware 		1.4 M 12 ZeroCERT

14337 2023-03-22 17:29 007.exe  

fe05605a8065764a5ec8aba32db6e697


PWS .NET framework RAT UPX OS Processor Check .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.0 M 32 ZeroCERT

14338 2023-03-22 13:17 abux.txt  

bf1074df865384a5cffab3142a5cb38c


Hide_EXE ScreenShot AntiDebug AntiVM Check memory unpack itself 		1.0 guest

14339 2023-03-22 10:44 wL8P9unF.zip  

1f5166dbb451fe00af869e50377e286d


ZIP Format VirusTotal Malware Report DNS 		12 5 2.6 4 ZeroCERT

14340 2023-03-22 10:36 NMemo1Setp.exe  

f12aa4983f77ed85b3a618f7656807c2


Confuser .NET .NET EXE PE32 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Ransomware DNS 		3 3 3.8 M 59 guest

keyword