popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2023-11-14 07:58 unsecapp.exe  

754ce856887cc1da00e95d45c5163075


AgentTesla Confuser .NET PWS SMTP KeyLogger AntiDebug AntiVM PE File PE64 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Software crashed keylogger 		1 3 2 11.2 M ZeroCERT

2 2023-10-04 07:56 processing.exe  

5b4cde02e2552a6c3d5f4c96e61a9e4b


Formbook NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself 		3 6 1 3 5.0 M 41 ZeroCERT

3 2023-10-04 07:44 nvpn.exe  

c17f541fdb6b3cb61be539e348d6ee0f


NSIS Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Check memory Creates executable files unpack itself AppData folder crashed 		4.0 44 ZeroCERT

4 2023-09-30 13:32 audiodg.exe  

44467cb97748f78289cca59f5ad2cc3a


NSIS Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware Check memory Creates executable files unpack itself AppData folder crashed 		4.0 M 51 ZeroCERT

5 2023-09-18 13:41 po# 348839.exe  

4a7a9da9b5d246c23e12315e4eac1fcd


Formbook NSIS UPX Malicious Library PE File PE32 OS Processor Check Malware download VirusTotal Malware suspicious privilege Check memory Creates executable files ICMP traffic unpack itself AppData folder 		13 15 2 12 6.6 M 32 ZeroCERT

6 2023-09-18 13:40 po# 348839.exe  

4a7a9da9b5d246c23e12315e4eac1fcd


Formbook NSIS UPX Malicious Library PE File PE32 OS Processor Check Malware download VirusTotal Malware suspicious privilege Check memory Creates executable files ICMP traffic unpack itself AppData folder 		13 15 2 12 6.6 M 32 ZeroCERT

7 2023-06-28 07:34 D.exe  

62768c1c66df7acd5ce554069ea6a205


Formbook Confuser .NET AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		19 19 6 18 9.0 M 49 ZeroCERT

8 2023-06-08 09:26 Dollar.exe  

99e770cd68e71c4e1fff20ffbb325624


RAT email stealer Downloader Confuser .NET DNS Code injection PWS[m] Escalate priviledges persistence KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		1 10.0 45 ZeroCERT

9 2023-01-28 23:31 vbc.exe  

a20e0dd924d55a1e0b8b403b39b52f34


PWS[m] RAT Confuser .NET SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 5 12.8 44 ZeroCERT

10 2022-11-16 10:26 w.exe  

00c98ac064c263253fed19ad0d727043


RAT Confuser .NET PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS 		2 3 2.8 43 ZeroCERT

11 2022-11-16 10:11 fire.exe  

f8b268092c168d21b281becc65da3dfa


RAT PWS .NET framework Loki[b] Loki.m UPX Internet API AntiDebug AntiVM PE32 .NET EXE PE File DLL FTP Client Info Stealer VirusTotal Malware Buffer PE PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities AppData folder Windows ComputerName Cryptographic key Software crashed 		1 2 11.6 45 ZeroCERT

12 2022-11-02 17:02 maryxloader.exe  

307c54a647190489b955dca752245a33


RAT Confuser .NET PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS 		2 3 2.4 M 28 ZeroCERT

13 2022-11-02 17:00 kexe.exe  

115a918d03c2383d15289ea20eda63bd


RAT Confuser .NET PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS 		2 3 2.4 M 21 ZeroCERT

14 2022-11-02 16:53 w.exe  

9f3d2f161ab12215d8127143188fadc6


RAT Confuser .NET PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS 		3 3 3.0 M 26 ZeroCERT

15 2022-11-02 16:53 africa.exe  

313850abca30e4b2a42c9e12ede6adbc


RAT PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS 		2 3 2.4 M 24 ZeroCERT

keyword