popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14701 2023-03-10 17:51 80.exe  

3e7a4148f1133cb4b8a097fd74590f44


Malware download VirusTotal Malware Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process suspicious TLD sandbox evasion Tofsee Windows Backdoor ComputerName Remote Code Execution DNS Cryptographic key 		285 749 8 16.4 M 16 ZeroCERT

14702 2023-03-10 16:59 LZ.exe  

282df7bcb720a5b6f409caf9ccda2f75


Gen1 Gen2 UPX Malicious Library Anti_VM Malicious Packer OS Processor Check PE64 PE File DLL ZIP Format VirusTotal Malware Check memory Creates executable files unpack itself WriteConsoleW Ransomware 		3.4 M 34 ZeroCERT

14703 2023-03-10 16:54 Projectads.exe  

0f16ee89f88b541aea1867c8b6b44868


UPX Malicious Library PE32 PE File Buffer PE PDB Checks debugger buffers extracted unpack itself sandbox evasion ComputerName 		1 2.8 M ZeroCERT

14704 2023-03-10 16:52 11.html  

4535be9cfea1617ede162091edd6fac1


Antivirus unpack itself crashed 		0.6 ZeroCERT

14705 2023-03-10 16:52 1.html  

32445d05dd1348bce9b6a395b2f8fbd8


Antivirus crashed 		0.2 M ZeroCERT

14706 2023-03-10 16:22 blessed.exe  

4d0bdca2a21a00816e99065eb2d9c4e0


SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 10.8 M 22 ZeroCERT

14707 2023-03-10 16:19 vbc.exe  

f1068187e6778378217cb6774b2374ca


UPX Malicious Library PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 8.4 M 28 ZeroCERT

14708 2023-03-10 16:19 vbc.exe  

6e4c51c65c966531518f3ace3499ade7


Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		14.6 M 24 ZeroCERT

14709 2023-03-10 11:53 Ndi8RJtM5xSosyq.zip  

542f53c1fd9de5d3423b7a8a22f6d9bf


ZIP Format Report ICMP traffic DNS 		12 5 3.0 ZeroCERT

14710 2023-03-10 11:40 Agenzia_Entrate.url  

c57ce09111a84d1110b24a8505ff5804


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 1 2 5.8 3 ZeroCERT

14711 2023-03-10 11:13 uucqwn.txt.ps1  

05526a1c67586ceb0c63891ca2d1a15f


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Discord ComputerName DNS Cryptographic key 		2 2 3 8.4 11 ZeroCERT

14712 2023-03-10 11:02 rlmp32wlve.dll  

543f45c69c8be4abd29e2b578bf26613


UPX DLL PE32 PE File Malware download VirusTotal Malware Malicious Traffic Checks debugger unpack itself ComputerName crashed 		2 2 1 2 4.4 M 20 ZeroCERT

14713 2023-03-10 10:59 yardmaintenance.exe  

95e03ae51a6671e98b8461dc1ad766eb


PWS .NET framework RAT .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows 		2 1 3.4 M 27 ZeroCERT

14714 2023-03-10 10:59 photo_004.exe  

44dc4f18399b1fa27fc6a7ab008546a8


UPX Malicious Library OS Processor Check PE32 PE File PDB unpack itself Remote Code Execution 		1.6 M ZeroCERT

14715 2023-03-10 10:57 vbc.exe  

0c416e462853425ce474820d82ed8212


PWS .NET framework Generic Malware Antivirus SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 5 14.2 M 23 ZeroCERT

keyword