Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
1	2025-04-28 10:18	namen.ps1 e4ea2ac8d2a17b90650633ce30c5d7cd Generic Malware Antivirus URL Format VirusTotal Malware VBScript powershell AutoRuns Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key	2 Keyword trend analysis	1	6 Info ET INFO Executable Download from dotted-quad Host ET POLICY PE EXE or DLL Windows file download HTTP ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response ET INFO Dotted Quad Host VBS Request ET HUNTING PowerShell DownloadString Command Common In Powershell Stagers		6.4	M	19	ZeroCERT

2	2025-04-23 10:30	nums.vbs 99478b4bbce91c6b394be55e1b9df39d Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key	1 Keyword trend analysis	1	5		10.0	M	2	ZeroCERT

3	2025-04-21 13:20	pixel.exe ff3d345e7beaacc2331438f8c6ad4a35 task schedule PWS Code injection AntiDebug AntiVM PE File .NET EXE PE32 DLL .NET DLL Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder Windows DNS Cryptographic key Downloader		1	5 Info ET INFO Executable Download from dotted-quad Host ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile ET POLICY PE EXE or DLL Windows file download HTTP ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response		11.6	M	25	ZeroCERT

4	2025-04-21 13:20	HPSocket4C.dll 5785700f701c5754357a58d673de915f Generic Malware Malicious Library UPX PE File DLL PE32 OS Processor Check VirusTotal Malware PDB Checks debugger unpack itself DNS crashed		1			2.8	M	21	ZeroCERT

First
1
Last
Total : 4cnts