popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14431 2023-03-17 20:13 trxV9376  

c901c8089c5e017f8e9b4b15c8ef154f


UPX Malicious Library Malicious Packer OS Processor Check DLL PE64 PE File VirusTotal Malware Checks debugger unpack itself suspicious process sandbox evasion Remote Code Execution 		3.6 M 14 ZeroCERT

14432 2023-03-17 18:13 file.zip  

26920d49e119bb1dc4c206aba46c0dcd


ZIP Format VirusTotal Malware 		1 0.4 M 9 ZeroCERT

14433 2023-03-17 18:11 4.exe  

3eaca76030647d883ca5c109b43acc76


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 30 ZeroCERT

14434 2023-03-17 18:09 02..................02...........  

984eb11b3f5de9345be40b9fdf432400


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting 		2.4 M 29 ZeroCERT

14435 2023-03-17 18:08 vbc.exe  

13a237b2f7042de8f7585c54d2432b6c


RAT Generic Malware Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7 10 2 11.4 M 21 ZeroCERT

14436 2023-03-17 18:07 lastdc.exe  

2d0cc7c5c9953f0b7c91b26533f93cbc


RAT North Korea Generic Malware UPX Antivirus ScreenShot Code injection PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File GIF Format VirusTotal Malware Buffer PE AutoRuns PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself human activity check Windows ComputerName DNS 		1 11.8 M 31 ZeroCERT

14437 2023-03-17 18:05 ascrypt.exe  

36e4122b5fdd4e5b802aa7c109c354fb


RAT task schedule UPX Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself ComputerName DNS crashed 		1 10.0 M 29 ZeroCERT

14438 2023-03-17 18:04 2.exe  

53e1934061876c52e6fa0c9243d32d9d


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 45 ZeroCERT

14439 2023-03-17 18:02 3.exe  

9549168790bc8b01d0c889fccb01bd73


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 30 ZeroCERT

14440 2023-03-17 18:02 68..................68...........  

86fc671549dae9122a212b2d0866518d


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 2 7 4.4 M 25 ZeroCERT

14441 2023-03-17 18:00 EBSMEDIA_protected.exe  

97bf48e51ff002f6d9f5e778e52d8319


RAT Generic Malware task schedule Malicious Packer Antivirus AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 14.8 M 51 ZeroCERT

14442 2023-03-17 18:00 1.exe  

e04c47828b28e33be2b5ebc75172901b


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 27 ZeroCERT

14443 2023-03-17 17:58 6.exe  

210e93b80b868f6aebf712e0da9edf5b


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 31 ZeroCERT

14444 2023-03-17 17:58 HDU3.exe  

04694e5e78d0a3dcab0bfea22aa90cfe


Malicious Packer PE64 PE File VirusTotal Malware Tofsee crashed DoTNet 		2 3 2.0 M 31 ZeroCERT

14445 2023-03-17 17:57 vbc.exe  

f35d8958edaab270d6c621bb96e395fc


Malicious Library AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		18 19 2 17 8.2 M 25 ZeroCERT

keyword