popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10066 2021-05-05 20:18 XHG.exe  

56626bf21f8de8d051d744973cb2566c


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.4 15 ZeroCERT

10067 2021-05-05 20:18 WSH.exe  

2c853d07d7708161ce87c0f32fd338d4


DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		3 1 15.0 M 23 ZeroCERT

10068 2021-05-05 20:17 MLY.exe  

322acea28d5d3b6a4172d4ff76350629


DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName Cryptographic key crashed 		2 12.8 M 20 ZeroCERT

10069 2021-05-05 10:26 so.exe  

5551346aa9f251895021b95a2a7cc390


AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Tofsee Windows DNS Cryptographic key crashed 		4 3 4 10.0 M 24 ZeroCERT

10070 2021-05-05 10:21 vbc.exe  

40b7776a47fc1062ec85c3e31c91eb81


AsyncRAT backdoor PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		3.2 M 20 ZeroCERT

10071 2021-05-05 10:19 mad.exe  

d96f52fc8733d2f4a127bdc44d4ceb25


Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		16.4 M 29 ZeroCERT

10072 2021-05-05 10:16 Ll2LxWOagynlSgJ.exe  

9dfaa6afc47f0bf01155b7f8253f719b


AsyncRAT backdoor PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		12.4 M 25 ZeroCERT

10073 2021-05-05 10:14 krerb.exe  

1c74d51a1d7177bf9b23f6a567adc047


PE64 OS Processor Check PE File VirusTotal Malware unpack itself ComputerName 		2.0 7 ZeroCERT

10074 2021-05-05 10:14 teret.exe  

43de3367faeffa04f28ad1e3e1f154eb


PE64 PE File VirusTotal Malware unpack itself DNS crashed 		1.8 8 ZeroCERT

10075 2021-05-05 10:10 ashleyx.exe  

34d4452c1b344685e3f5fd7d0e9640a1


PWS .NET framework Malicious Packer SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 M 21 ZeroCERT

10076 2021-05-04 18:27 Sample.exe  

ee7c05c530262450d2c5ace98ebbf8bc


PWS .NET framework .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		8.0 M 22 ZeroCERT

10077 2021-05-04 18:22 arinzex.exe  

b61fa321f22d56553ab37916d973cf4e


Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		13.4 M 18 ZeroCERT

10078 2021-05-04 14:13 p.exe  

ee0a1ec859b753abc30847157d81f37c


Worm Phorpiex PE File PE32 Dridex TrickBot ENERGETIC BEAR VirusTotal Malware AutoRuns PDB Malicious Traffic ICMP traffic Disables Windows Security Check virtual network interfaces Firewall state off Kovter Windows Tor DNS Cryptographic key 		4 11 11 1 10.8 M 45 r0d

10079 2021-05-04 13:50 46.exe  

0a6569e45a3a38f7168f4c4aa0594627


tor Worm Phorpiex PE File PE32 Dridex TrickBot ENERGETIC BEAR VirusTotal Malware AutoRuns PDB Malicious Traffic Creates executable files ICMP traffic Disables Windows Security Check virtual network interfaces AppData folder Firewall state off Kovter Windows Tor DNS 		5 12 18 4 12.4 M 38 r0d

10080 2021-05-04 11:21 46.exe  

0a6569e45a3a38f7168f4c4aa0594627


tor PE File PE32 Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Buffer PE AutoRuns PDB Malicious Traffic buffers extracted Creates executable files Disables Windows Security Check virtual network interfaces AppData folder Firewall state off Kovter Windows Tor DNS Cryptographic key 		5 11 19 2 12.6 M 38 ZeroCERT

keyword