popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14941 2023-03-11 10:38 lalipopxxx.exe  

3d826d3a6d6408843c13eae90e84cfb2


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 4.4 M 40 ZeroCERT

14942 2023-03-11 10:37 2701.exe  

97201c944dcd7e82672458514a67a7b5


RAT Emotet Gen2 Gen1 Generic Malware UPX Malicious Library Malicious Packer .NET EXE PE32 PE File OS Processor Check PE64 DLL VirusTotal Malware Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself AppData folder Tofsee ComputerName crashed 		2 2 1 6.0 M 39 ZeroCERT

14943 2023-03-11 10:36 faintxakers-76060706313.exe  

628e9b3aa525960223fd93bae86b5e7d


PWS .NET framework RAT Gen2 UPX Malicious Library .NET EXE PE32 PE File GIF Format PNG Format OS Processor Check DLL .NET DLL PE64 ZIP Format Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Check virtual network interfaces AppData folder suspicious TLD Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key crashed 		15 6 2 12.0 M 43 ZeroCERT

14944 2023-03-11 10:35 a-Yfgvvxyduvu.exe  

4f351910b30c279944615955228db869


PWS .NET framework RAT Generic Malware UPX Antivirus Socket SMTP Internet API PWS[m] HTTP Escalate priviledges Http API AntiDebug AntiVM OS Processor Check .NET EXE PE32 PE File Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW Ransom Message Turn off Windows Error Recovery notification window IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser Tor ComputerName Trojan Banking DNS Cryptographic key 		3 5 2 1 21.4 M 20 ZeroCERT

14945 2023-03-11 10:30 faintxakers.exe  

e5714adf276ab96cff90d3778ba51b7e


Malicious Library PE64 PE File VirusTotal Cryptocurrency Miner Malware DNS CoinMiner 		5 2 1.4 M 37 ZeroCERT

14946 2023-03-11 10:30 ss27.exe  

ebe51104a56d305aac2419e97e58f975


Gen2 Gen1 Generic Malware UPX Malicious Library Malicious Packer PE64 PE File VirusTotal Malware PDB Remote Code Execution DNS 		1 1.4 M 9 ZeroCERT

14947 2023-03-11 10:29 photo_004.exe  

4d7cc5e90bf5b2b606215eae39503b9c


UPX Malicious Library OS Processor Check PE32 PE File unpack itself Remote Code Execution 		1.2 M ZeroCERT

14948 2023-03-10 18:09 11.html  

4535be9cfea1617ede162091edd6fac1


Antivirus unpack itself crashed 		1 0.6 M ZeroCERT

14949 2023-03-10 18:09 1.html  

32445d05dd1348bce9b6a395b2f8fbd8


Antivirus AntiDebug AntiVM MSOffice File Code Injection exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3.4 M ZeroCERT

14950 2023-03-10 17:51 80.exe  

3e7a4148f1133cb4b8a097fd74590f44


Malware download VirusTotal Malware Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process suspicious TLD sandbox evasion Tofsee Windows Backdoor ComputerName Remote Code Execution DNS Cryptographic key 		285 749 8 16.4 M 16 ZeroCERT

14951 2023-03-10 16:59 LZ.exe  

282df7bcb720a5b6f409caf9ccda2f75


Gen1 Gen2 UPX Malicious Library Anti_VM Malicious Packer OS Processor Check PE64 PE File DLL ZIP Format VirusTotal Malware Check memory Creates executable files unpack itself WriteConsoleW Ransomware 		3.4 M 34 ZeroCERT

14952 2023-03-10 16:54 Projectads.exe  

0f16ee89f88b541aea1867c8b6b44868


UPX Malicious Library PE32 PE File Buffer PE PDB Checks debugger buffers extracted unpack itself sandbox evasion ComputerName 		1 2.8 M ZeroCERT

14953 2023-03-10 16:52 11.html  

4535be9cfea1617ede162091edd6fac1


Antivirus unpack itself crashed 		0.6 ZeroCERT

14954 2023-03-10 16:52 1.html  

32445d05dd1348bce9b6a395b2f8fbd8


Antivirus crashed 		0.2 M ZeroCERT

14955 2023-03-10 16:22 blessed.exe  

4d0bdca2a21a00816e99065eb2d9c4e0


SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName Cryptographic key Software crashed 		2 10.8 M 22 ZeroCERT

keyword