popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
136 2021-05-18 09:19 file4.exe  

3795c43b2e06e15edb01a8a237243b08


AgentTesla PWS Loki[b] Loki[m] AsyncRAT backdoor .NET framework BitCoin browser info stealer Google Chrome User Data DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Code injection Http API Internet API Steal cr VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW IP Check Tofsee Windows ComputerName DNS crashed 		16 9 3 3 12.6 M 24 ZeroCERT

137 2021-05-18 09:27 customer2.exe  

6d7603e4fd4d633cae7eaee0f1029a17


Gen2 Emotet PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Malicious Traffic Check memory Creates executable files Check virtual network interfaces AppData folder IP Check Tofsee Browser Remote Code Execution 		4 6 2 6.4 M 59 ZeroCERT

138 2021-05-18 09:38 Optimize.facebook.ads.exe  

a5292f2ae50ae5ca63dd1ae659548c28


PE File OS Processor Check PE32 VirusTotal Malware Check memory unpack itself crashed 		2.4 35 ZeroCERT

139 2021-05-18 09:38 Trinity-Miner_1.exe  

3db9825a26cbb1f4bffd62194c5c52cc


AsyncRAT backdoor .NET EXE PE File OS Processor Check PE32 PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself Auto service Check virtual network interfaces Windows ComputerName Firmware DNS 		2 6.6 M 49 ZeroCERT

140 2021-05-18 09:56 27364cdfec04f571117b8425e85134...  

a1acc4e7065d4eb28cdf9e85973cba16


PE File OS Processor Check PE32 PE64 DLL GIF Format VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion IP Check DNS 		3 7 2 8.4 M 26 ZeroCERT

141 2021-05-18 09:57 CBCbrowser.exe  

5cdf8ce1bcc26bf8473f09447cfa0c47


AsyncRAT backdoor PWS .NET framework BitCoin AntiDebug AntiVM .NET EXE PE File PE32 MSOffice File Browser Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Cryptographic key crashed 		5 8 2 12.8 M ZeroCERT

142 2021-05-18 16:20 27364cdfec04f571117b8425e85134...  

a1acc4e7065d4eb28cdf9e85973cba16


Generic Malware PE File OS Processor Check PE32 PE64 DLL GIF Format VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself AppData folder AntiVM_Disk sandbox evasion IP Check VM Disk Size Check 		3 8 1 8.4 M 37 r0d

143 2021-05-18 17:37 Optimize.facebook.ads.exe  

a5292f2ae50ae5ca63dd1ae659548c28


Generic Malware PE File OS Processor Check PE32 VirusTotal Malware unpack itself crashed 		2.2 M 35 r0d

144 2021-05-19 13:26 wpp.exe  

055c79de6e3f255beade0b35a0a2cd17


PE64 PE File OS Processor Check VirusTotal Malware PDB RWX flags setting unpack itself crashed 		2.0 9 ZeroCERT

145 2021-05-19 13:30 FT_F.exe  

b423749c0dbdc698c0af44114a76a36d


Gen1 Gen2 Anti_VM PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Malicious Traffic Check memory Creates executable files unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare AppData folder sandbox evasion VMware anti-virtualization installed browsers check Ransomware Windows Browser Email ComputerName Firmware DNS DDNS Software crashed 		1 2 2 14.4 M 30 ZeroCERT

146 2021-05-19 13:31 paypal.exe  

c436b9b71dd9f9bd7872f288fd632fb8


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself ComputerName crashed 		3.2 M 37 ZeroCERT

147 2021-05-19 13:45 1.exe  

296546fc0093734f42dfa96729643b86


Anti_VM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		2 3 2 10.0 M 28 ZeroCERT

148 2021-05-19 13:54 GP_F.exe  

024e33b8a7f7c5a5791d00422ed4a21a


PE File PE32 VirusTotal Malware unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Windows Firmware DNS crashed 		1 6.8 M 32 ZeroCERT

149 2021-05-20 09:28 n8wwj8ZL6Q34VkW.exe  

c2eed737336b1194cd3297da7dee1128


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		3.0 M 32 ZeroCERT

150 2021-05-20 09:33 FD1.exe  

36f95f7e28e486ef9f48990e23a71ab0


Gen2 PE64 PE File OS Processor Check VirusTotal Malware PDB RWX flags setting unpack itself DNS crashed 		2.8 5 ZeroCERT

keyword