popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1456 2024-08-07 10:18 ienetworks.hta  

367299f3b78921590e30252fcc114cc7


Antivirus VirusTotal Malware unpack itself crashed 		1.2 15 ZeroCERT

1457 2024-08-07 10:13 3.dat  

0c8848c11a91ab74f30abbef17792f8f


Generic Malware UPX PE File PE32 VirusTotal Malware 		1.8 M 52 ZeroCERT

1458 2024-08-07 10:11 wp.vbs  

67d660ff76a9414cc62d4ddf7f3223f6

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		1 2 1 10.0 M 30 ZeroCERT

1459 2024-08-07 10:11 taskhostw3.exe  

06a8e35022b76d751e396d1ab5bb9cf1


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3.6 M 23 ZeroCERT

1460 2024-08-07 10:09 az.exe  

b9fcbae32e294854e2507179d4acef1c


Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware PDB Remote Code Execution 		1.8 M 17 ZeroCERT

1461 2024-08-07 10:08 Eqmosyuwc.exe  

5bd96efdf03f3f0758f1822e678dacaa


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2.8 ZeroCERT

1462 2024-08-07 10:07 jm.vbs  

1e4160cfab325ccbe906be8bfd94fb53

VirusTotal Malware VBScript AutoRuns WMI wscript.exe payload download unpack itself AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS DDNS Dropper 		2 4 3 10.0 M 32 ZeroCERT

1463 2024-08-07 10:06 masdaaaewebbbMPDW-constraints....  

2bcdb70c9930b9ade4d2f993105816ca


Generic Malware Antivirus Hide_URL PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.6 M 3 ZeroCERT

1464 2024-08-07 10:04 sahost.exe  

849c7ae770318ac09e0fde466e1becfe


Malicious Library .NET framework(MSIL) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself crashed 		7.4 M 33 ZeroCERT

1465 2024-08-07 10:04 amadey.exe  

107c3b33e05d1d569cccc2052e56055e


Amadey Generic Malware Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check DLL PE64 JPEG Format Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Software 		4 29 5 13.6 M 52 ZeroCERT

1466 2024-08-07 10:04 193.exe  

5a5ccdbe3cdd135a57f61138867932a8


Generic Malware UPX PE File PE32 VirusTotal Malware DNS 		1 1 4.0 M 59 ZeroCERT

1467 2024-08-07 10:02 ds.exe  

3b6b710da92a115329d00c5e55ad7671


Malicious Library .NET framework(MSIL) UPX PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 25 ZeroCERT

1468 2024-08-07 10:00 cred.dll  

2fb39d6664f6b415124cf2368db92fb4


Generic Malware Malicious Library UPX Antivirus PE File DLL PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process sandbox evasion installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 3 1 8.2 M ZeroCERT

1469 2024-08-07 09:58 clip64.dll  

40c8cf4849514e1d32f865bafe75f898


Amadey Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware Malicious Traffic Checks debugger unpack itself DNS 		1 2 3 1 3.0 M 56 ZeroCERT

1470 2024-08-07 09:57 setup.exe  

fc99ddf185aa553bf30c431cc897c903


Generic Malware Malicious Library UPX ftp PE File PE32 OS Processor Check VirusTotal Malware Telegram Code Injection unpack itself IP Check DNS 		1 4 4 5.2 M 33 ZeroCERT

keyword