popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10156 2021-05-24 18:23 bin---0.exe  

9191f2c11d448ac2baa34768d210f3a7


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		20 24 1 3.6 44 ZeroCERT

10157 2021-05-24 18:20 sIIpO8jjC02iQCT.exe  

3d9a120a83e330ab0f26454a46b9e1e7


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 24 ZeroCERT

10158 2021-05-24 18:15 YpB5uPa1YKwLPKt.exe  

5c8003788c729d9c9d6f91c62aef10f4


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.2 23 ZeroCERT

10159 2021-05-24 18:14 bin---09.exe  

c2db9ae19f2ed393fb6ae0703dc30b2c


PWS .NET framework Malicious Packer AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		17 18 1 9.4 30 ZeroCERT

10160 2021-05-24 18:13 aYnQ4B6WoQm6DuG.exe  

20afb202b5cfbb60dc7ff5f2509c3991


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 21 ZeroCERT

10161 2021-05-24 18:11 bin.exe  

dbb0d24252b09d49478c336e5d0ec994


PWS .NET framework Malicious Packer AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		16 19 2 7.6 ZeroCERT

10162 2021-05-24 18:10 LluwMXf8ngOwqea.exe  

3517aa20f6e5641cd95afb5d9173e696


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 22 ZeroCERT

10163 2021-05-23 10:46 kakashi_cry.exe  

62c59ba0375eebf49b4d80c290e69646


AsyncRAT backdoor PWS .NET framework .NET EXE PE File PE32 Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process Tofsee Windows 		1 3 1 6.4 ZeroCERT

10164 2021-05-23 10:23 hbggg.exe  

e6f6fd13001b8df1af345df56caba5de


Gen2 Emotet PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Malicious Traffic Check memory Creates executable files Check virtual network interfaces AppData folder IP Check Tofsee Browser Remote Code Execution DNS 		5 8 2 2 7.0 M 50 ZeroCERT

10165 2021-05-23 10:13 BBSbacket.exe  

e19f8b76b5a0c4959fcb41fe5b46ad80


AsyncRAT backdoor PWS .NET framework BitCoin AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		3 5 2 1 11.8 M 30 ZeroCERT

10166 2021-05-21 10:00 vbc.exe  

6e1e56fd157c5d33cac5a84225561906


AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.4 26 ZeroCERT

10167 2021-05-21 08:43 netwire.exe  

9d19dad3b71dfeec8276cb6e266365df


PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		7.2 ZeroCERT

10168 2021-05-21 08:41 netwire-988.exe  

c225922e8ec40ccca7d491fa57ece50b


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName DNS Cryptographic key 		2.8 10 ZeroCERT

10169 2021-05-21 08:35 00.exe  

83377601918cdc76c76ed36c06a01546


PE File OS Processor Check PE32 VirusTotal Malware Check memory Checks debugger Creates executable files AppData folder DNS 		1 5.4 52 ZeroCERT

10170 2021-05-20 16:57 fax_Documents.exe  

5e9c34075c2eb3d3db131e1227383f1e


Malicious Packer .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself DNS 		2.8 34 ZeroCERT

keyword