popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1426 2024-08-08 14:23 sahost.exe  

e3b7b813fdaeba4ef1d1b17bc827df20


Formbook Generic Malware Malicious Library .NET framework(MSIL) UPX AntiDebug AntiVM PE File .NET EXE PE32 DLL Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder suspicious TLD Browser DNS 		13 12 4 11 10.4 M 46 ZeroCERT

1427 2024-08-08 14:11 www.exe  

7cab3f98a04b09bc2673f84bbccd6a63


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself sandbox evasion Tofsee ComputerName DNS 		2 5.2 M 43 ZeroCERT

1428 2024-08-08 14:09 latest.exe  

664cebe18c30cc4c32a4dbf0715bf864


Generic Malware Downloader Malicious Library UPX ScreenShot AntiDebug AntiVM PE File PE32 OS Processor Check JPEG Format DllRegisterServer dll DLL VirusTotal Malware Code Injection Check memory Creates executable files AppData folder AntiVM_Disk VM Disk Size Check 		4.2 M 26 ZeroCERT

1429 2024-08-08 14:09 rat.exe  

1db146fcedaecd4bc84186d1ad75e7ba


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself 		1 2.0 M 63 ZeroCERT

1430 2024-08-08 14:07 Dropper.exe  

5341c5bb13ae2b2753b2fdadcf93aa51


Generic Malware Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check VirusTotal Malware PDB crashed 		1.6 M 32 ZeroCERT

1431 2024-08-08 14:07 logon.exe  

ceccc726e628b9592af475cc27d0a7ae


Generic Malware Malicious Library PE File PE32 VirusTotal Malware WriteConsoleW 		1.0 M 20 ZeroCERT

1432 2024-08-08 14:04 javaw.exe  

f8fbe90216db05230b6a9cbf2c6cc218


Malicious Library Malicious Packer UPX PE File PE64 OS Processor Check 		0.2 M ZeroCERT

1433 2024-08-08 11:25 regasm.exe  

f74f2df998219d602185c46107329e82


Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 5 6 16.2 M 49 ZeroCERT

1434 2024-08-08 11:22 regasm.exe  

62b9f8d4c98febbcd68e635c14d8d882


Malicious Library .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 8 10 14.8 M 31 ZeroCERT

1435 2024-08-08 11:20 sahost.exe  

c79d8b7c07b992c6aa435e4101770f99


Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser SnakeKeylogger Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 7 8 16.2 49 ZeroCERT

1436 2024-08-08 11:20 logon.exe  

ceccc726e628b9592af475cc27d0a7ae


Generic Malware Malicious Library PE File PE32 VirusTotal Malware WriteConsoleW 		1.0 20 ZeroCERT

1437 2024-08-08 11:18 latest.exe  

5d42fb68071f9f02ae6928865478e003


Generic Malware Downloader Malicious Library UPX ScreenShot AntiDebug AntiVM PE File PE32 OS Processor Check DllRegisterServer dll JPEG Format DLL Code Injection Check memory Creates executable files AppData folder AntiVM_Disk VM Disk Size Check 		3.4 ZeroCERT

1438 2024-08-08 11:18 sahost.exe  

99a5ba6045c45bd20f081ca3fb06a58a


Generic Malware Malicious Library .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 4 6 16.2 46 ZeroCERT

1439 2024-08-08 11:16 wahost.exe  

14b98daca4a9912ad416eb7c0231cc21


Malicious Library .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 8 10 14.8 M 50 ZeroCERT

1440 2024-08-08 11:16 sahost.exe  

3cd277b692b93cea6874d7879f1134d0


NSIS Suspicious_Script_Bin Generic Malware Malicious Library UPX PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.4 M 26 ZeroCERT

keyword