popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
91 2022-12-26 09:59 bd.exe  

afd26f223230ad20eb208dbaa0164e43


Generic Malware Themida Packer Malicious Library Anti_VM UPX PE32 PE File VirusTotal Malware Check memory unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Windows Firmware crashed 		6.6 M 45 ZeroCERT

92 2022-12-19 10:03 FEejeARafe.exe  

bac43db85fb7279c44edb5dee47dcfeb


Emotet Gen2 Gen1 Generic Malware Malicious Library UPX AntiDebug AntiVM PE32 OS Processor Check PE File PNG Format JPEG Format MSOffice File DLL PE64 VirusTotal Malware AutoRuns suspicious privilege Code Injection Checks debugger buffers extracted WMI RWX flags setting exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Tofsee Windows Exploit ComputerName DNS crashed 		1 5 1 9.2 5 ZeroCERT

93 2022-12-19 10:02 1.exe  

bac43db85fb7279c44edb5dee47dcfeb


Emotet Gen2 Gen1 Generic Malware Malicious Library UPX AntiDebug AntiVM PE32 OS Processor Check PE File PNG Format JPEG Format MSOffice File DLL PE64 VirusTotal Malware AutoRuns suspicious privilege Code Injection Checks debugger WMI RWX flags setting exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Tofsee Windows Exploit ComputerName DNS crashed 		1 5 1 8.2 5 ZeroCERT

94 2022-12-12 09:48 CR3.exe  

8a750de9841355fb6f01c923e71303ef


Emotet RAT Gen1 PWS .NET framework Malicious Library UPX AntiDebug AntiVM PE32 PE File PNG Format JPEG Format MSOffice File OS Processor Check GIF Format .NET EXE DLL PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk VM Disk Size Check human activity check Tofsee Windows Google ComputerName DNS crashed 		19 22 6 15 14.8 M 39 ZeroCERT

95 2022-12-08 10:47 TUN3.exe  

f59160f8bf6d380cdecbd2db94c61deb


Emotet RAT Gen1 PWS .NET framework Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check PNG Format JPEG Format .NET EXE MSOffice File GIF Format DLL PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check human activity check Tofsee Windows Google ComputerName DNS crashed 		21 27 5 15 16.0 M 34 ZeroCERT

96 2022-12-02 10:58 TUN.exe  

c4807ea6c4ee04746a88248c855cb71d


Emotet RAT Gen1 PWS .NET framework Malicious Library UPX AntiDebug AntiVM PE32 PE File PNG Format MSOffice File GIF Format OS Processor Check .NET EXE DLL JPEG Format PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check human activity check Tofsee Windows Tor Google ComputerName DNS crashed 		16 46 12 15.4 M 36 ZeroCERT

97 2022-11-25 11:34 Ins.exe  

a0c71ff42da76357bfb0a0ac582fbe51


Emotet RAT Gen1 PWS .NET framework Malicious Library UPX AntiDebug AntiVM PE32 PE File OS Processor Check PNG Format JPEG Format .NET EXE MSOffice File GIF Format DLL PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check Tofsee Windows Google ComputerName DNS crashed 		20 22 5 13 14.2 M 31 ZeroCERT

98 2022-11-22 10:23 install1.exe  

e3c9d895497ffded48073eee0295bea4


Emotet NPKI Generic Malware Malicious Library UPX PE32 OS Processor Check PE File DLL CAB PE64 PNG Format VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder ComputerName crashed 		3.4 M 3 ZeroCERT

99 2022-11-19 09:55 Bolt.exe  

e91e8a603108c29db5d1a1ba1c8123fd


Emotet RAT PWS .NET framework Gen1 Malicious Library UPX AntiDebug AntiVM PE32 PE File .NET EXE PNG Format MSOffice File DLL OS Processor Check JPEG Format PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder Tofsee Windows Google ComputerName DNS 		15 18 6 9 10.0 M 25 ZeroCERT

100 2022-11-19 09:45 Bolt2.exe  

501c0b729f6ee275a7108f1a1f1396a2


Emotet RAT Gen1 Malicious Library UPX PE32 PE File DLL OS Processor Check PE64 VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder Tofsee DNS crashed 		1 3 4 4.2 48 ZeroCERT

101 2022-11-10 09:56 Bolt.exe  

0c51d5838eaa310b8d009ab265c1846e


Emotet RAT Gen1 PWS .NET framework Malicious Library UPX AntiDebug AntiVM PE32 PE File PNG Format .NET EXE MSOffice File DLL OS Processor Check JPEG Format PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder human activity check Tofsee Windows Google ComputerName DNS crashed 		14 23 9 10 12.4 M 19 ZeroCERT

102 2022-11-03 10:09 Bolt.exe  

aa290cfe7546e91e88278a1c4b83440f


Emotet RAT PWS .NET framework Gen1 Malicious Library UPX AntiDebug AntiVM PE32 PE File PNG Format JPEG Format MSOffice File .NET EXE DLL OS Processor Check PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder Tofsee Windows Google ComputerName DNS crashed 		16 21 6 10 12.4 M 45 ZeroCERT

103 2022-10-30 10:48 Bolt.exe  

96ecd3b0e089a8953f2c94886388b0a6


Emotet RAT PWS .NET framework Gen1 Malicious Library UPX AntiDebug AntiVM PE32 PE File .NET EXE PNG Format MSOffice File DLL OS Processor Check JPEG Format PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder Windows ComputerName crashed 		10 19 8 10.2 M 26 ZeroCERT

104 2022-10-18 17:15 Bolt.exe  

c0b4de4f711b7c28369d7a4018f94759


Emotet njRAT RAT PWS .NET framework Gen1 Generic Malware UPX Malicious Library AntiDebug AntiVM PE32 PE File .NET EXE PNG Format JPEG Format MSOffice File DLL OS Processor Check PE64 VirusTotal Malware AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder human activity check Windows ComputerName DNS crashed 		15 22 5 12.2 M 38 ZeroCERT

105 2022-09-17 14:39 Bolt.exe  

ad8f55814ccaee68b12c96f1ccb8bb6a


Emotet RAT Gen1 njRAT UPX Malicious Library PE32 PE File DLL OS Processor Check .NET EXE PE64 VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check Tofsee Windows ComputerName DNS crashed 		2 4 4 1 6.2 M 20 ZeroCERT

keyword