popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
136 2023-02-21 13:55 aaaaa.exe  

6696d584aa20684b71b5511b632ae1df


Loki UPX Malicious Library PE32 PE File OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 9.0 M 41 r0d

137 2023-02-21 10:48 vbc.exe  

894ebe041d7580e494ed9c158ab59e47


Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 1 8.4 M 45 ZeroCERT

138 2023-02-21 07:59 aloe.exe  

4813bbedfb4ac4c6b9819c3e0b09ae4c


PWS[m] Downloader Malicious Library UPX Malicious Packer Create Service DGA Socket ScreenShot DNS Internet API Code injection Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM PE32 PE File OS Pr VirusTotal Malware AutoRuns Code Injection Check memory Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS 		1 10.8 M 52 guest

139 2023-02-20 18:33 Swift.exe  

41cc45fca60b81676b388acf1774f9ea


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself suspicious TLD 		15 20 3 4.8 M 33 ZeroCERT

140 2023-02-20 18:31 aaaaa.exe  

6696d584aa20684b71b5511b632ae1df


Loki Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 7.8 M ZeroCERT

141 2023-02-20 18:15 hill.exe  

bebfe80156455464fd3d296dae2e55b7


Loki Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 8.8 M 35 ZeroCERT

142 2023-02-17 16:43 vbc.exe  

865004f0278a4301cd6919a58e09c9b2


Malicious Library UPX Anti_VM PE32 PE File OS Processor Check VirusTotal Malware Check memory Creates executable files AppData folder 		2.2 32 ZeroCERT

143 2023-02-17 09:31 vbc.exe  

26c1c8bc65bc1734c6fbb5c70c6711e5


Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 3 5 10.0 M 49 ZeroCERT

144 2023-02-16 10:26 .svchost.exe  

9b10df43f4414dc346dbceb162e6751b


Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		8.4 M 34 ZeroCERT

145 2023-02-16 09:47 vooi.exe  

29fb7632d7e495f0f9f23524d130fd81


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself suspicious TLD 		21 24 1 4.8 M 39 ZeroCERT

146 2023-02-14 08:50 qqqqq.exe  

11f406b1ef314cca6060886c952bedb0


Loki Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 9.4 M 35 ZeroCERT

147 2023-02-14 08:47 vbc.exe  

84f8c0e114eaedf255b41eb10d7b58c3


Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Remote Code Execution DNS Software 		1 3 8 8.8 M 33 ZeroCERT

148 2023-02-12 15:12 roc51.exe  

1d920aa56457a163c9ede013081ae820


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		3 7 1 4.0 M 33 ZeroCERT

149 2023-02-09 10:43 hjf.exe  

b0dd3b97aaab029d1253cb0c3794d455


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		16 17 3 4.2 M 28 ZeroCERT

150 2023-02-09 10:34 vbc.exe  

900820f261e82e5c51ecaa86f2f68f86


Malicious Library UPX PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 2 1 7.6 M 34 ZeroCERT

keyword