popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14491 2023-03-17 07:36 91.exe  

e309c8e66cb963033a3e8cc4b480f81d


NPKI UPX Malicious Library OS Processor Check PE64 PE File Browser Info Stealer VirusTotal Malware MachineGuid Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process Ransomware Windows Browser ComputerName DNS crashed 		1 6.4 M 37 ZeroCERT

14492 2023-03-16 16:49 c339d4dd247e4069ef221cfaf63cba...  

99efa19440acb8132312136bfa7d0981


UPX Malicious Library OS Processor Check DLL PE32 PE File VirusTotal Malware 		1.6 39 guest

14493 2023-03-16 14:30 file.zip  

1701259e39636d400dd1f48f633c98be


ZIP Format VirusTotal Malware 		0.8 M 28 ZeroCERT

14494 2023-03-16 13:21 File_pass1234.zip  

4db4161883df15ab90bd7ffba1df4910


ZIP Format Malware Malicious Traffic IP Check Tofsee DNS 		4 9 2 2.2 ZeroCERT

14495 2023-03-16 12:06 1603.one  

3267ae8154776913b0032a6806fdb9c3

VirusTotal Malware unpack itself crashed 		1.0 8 ZeroCERT

14496 2023-03-16 11:36 uwp.dat  

63b2b3193b0311cf4bfae3fed891adb8


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

14497 2023-03-16 10:58 Sammenstyrtningens242.vbs  

a75c770acab8755ebc617f8925eff3b4


Generic Malware Antivirus Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Windows utilities suspicious process suspicious TLD anti-virtualization Windows ComputerName DNS Cryptographic key crashed 		2 3 10.6 ZeroCERT

14498 2023-03-16 10:56 Contactus.html  

73aa630ae71d55aef8d9f2101ef3bb1a


AntiDebug AntiVM PNG Format MSOffice File JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3 4.2 5 ZeroCERT

14499 2023-03-16 10:54 1.html  

8f1f9a93892188a5fa472ff664bbf19e


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 ZeroCERT

14500 2023-03-16 10:54 vbc.exe  

5fd4d5c90658e442b969384b80036b7b


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		18 20 3 4.4 M 38 ZeroCERT

14501 2023-03-16 10:51 1603.one  

3267ae8154776913b0032a6806fdb9c3

VirusTotal Malware crashed 		0.6 8 ZeroCERT

14502 2023-03-16 10:49 boy1start.ps1  

c0aa6a02799611928896463d8c6a324d


NPKI Formbook RAT Hide_EXE Generic Malware Antivirus SMTP PWS[m] KeyLogger PDF AntiDebug AntiVM .NET EXE PE32 PE File ZIP Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion WriteConsoleW IP Check VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		7 3 6 21.0 M 9 ZeroCERT

14503 2023-03-16 10:44 persis.exe  

44141a0e32ba57ab5c42a7d18a3745ce


PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 M 47 ZeroCERT

14504 2023-03-16 10:44 st-start.ps1  

1ee009f6414309c4c1c8db3fbd83861d


NPKI Formbook RAT Hide_EXE Generic Malware Antivirus KeyLogger PDF AntiDebug AntiVM ZIP Format .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		6 1 1 19.0 M 7 ZeroCERT

14505 2023-03-16 10:41 vbc.exe  

493798b24ab2433b6d96c2d82ade8ab8


Loki_b Loki_m RAT UPX Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 13.8 M 35 ZeroCERT

keyword