popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-08-06 16:41 olde-1.exe  

465f28ec62439d3213d557636d48c8ea


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows Cryptographic key 		14 15 1 6 11.6 M 34 ZeroCERT

2 2021-08-06 09:33 .audiodg.exe  

4a21a7f7fa4c1ce05c8c1a7e10eb73dc


PWS Loki[b] Loki[m] .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 6 1 13.8 M 19 ZeroCERT

3 2021-08-06 09:26 usermasabikzx.exe  

53b546cb0d9e9e8a27a1317e55086eb2


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		10.2 M 31 ZeroCERT

4 2021-08-06 09:26 DBti7kFcOLHaK2z.exe  

a4579e15af982f864c88df0a1c1dbf0a


PWS .NET framework Generic Malware UPX .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key 		3.2 M 30 ZeroCERT

5 2021-08-06 07:33 5KNTQd5xFuY7hcE.exe  

94589c900f582c827be848f069c01983


PWS .NET framework Generic Malware UPX AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		14 15 3 9.6 28 ZeroCERT

6 2021-08-05 09:58 gun.exe  

873cf90c9a977554d65c523f433a96f8


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		1 2 6.4 M 17 ZeroCERT

  • First
  • 1
  • Last
  • Total : 6cnts
keyword