popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2022-11-02 16:58 CVBCVBVCBVCBD.exe  

9c35652428e65743f62c64ef9f438720


RAT Generic Malware task schedule Antivirus AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key DDNS 		2 1 13.2 M 23 ZeroCERT

2 2022-11-02 16:45 VCXVNCXMCXGJJGDF.exe  

a24100782a9e93d92d074ccab972bd18


PWS[m] RAT email stealer Generic Malware Downloader Antivirus DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File Malware download AveMaria NetWireRC VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process Windows RAT ComputerName DNS Cryptographic key 		3 2 11.2 M 45 ZeroCERT

3 2022-11-02 16:45 BCBCBDHDHD.exe  

8509fc852d545aabe120f411ec8f8edb


AgentTesla PWS[m] RAT browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 .NET EXE PE File Remcos VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key keylogger 		1 3 1 13.8 M 32 ZeroCERT

4 2022-11-02 16:45 eurob.exe  

3dd5e211cb02f98fe31c6dd83685d464


AgentTesla PWS[m] RAT browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 .NET EXE PE File MSOffice File PNG Format JPEG Remcos VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting exploit crash unpack itself Windows utilities suspicious process Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed keylogger 		2 5 4 15.8 M 35 ZeroCERT

5 2022-10-28 17:39 BGHkKHH.exe  

3d9cdfc20871dffc0c7df185982f5990


PWS[m] RAT email stealer Generic Malware Downloader Antivirus Socket DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs Windows ComputerName DNS Cryptographic key DDNS 		2 1 14.0 M 44 ZeroCERT

6 2022-10-28 17:29 VXCVNCXVJGKKFD.exe  

23d5f75391136c6e3fafc24f60c257c1


AgentTesla PWS[m] RAT browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus ScreenShot Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer Remcos VirusTotal Email Client Info Stealer Malware powershell Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key 		1 4 1 14.6 M 28 ZeroCERT

7 2022-10-28 17:26 NMXCJKHKDFDF.exe  

12eb96cc98bb2088519e0e38316e8c8f


AgentTesla PWS[m] RAT browser info stealer Generic Malware Google Chrome User Data Downloader Antivirus Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 .NET EXE PE File Remcos VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process Windows ComputerName DNS Cryptographic key keylogger 		1 3 1 12.4 M 45 ZeroCERT

8 2022-10-28 17:24 HDFFHXGHFHHFJHHJ.exe  

b70cce7e2c30571192e316924ad76214


PWS[m] RAT email stealer Generic Malware Downloader Antivirus DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key DDNS crashed 		2 1 12.8 M 45 ZeroCERT

9 2022-10-28 17:22 VMNCXJFDJK.exe  

3b19dd4d3625af420864de2a700468d5


PWS[m] RAT email stealer Generic Malware Downloader Antivirus Socket DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs Windows ComputerName DNS Cryptographic key DDNS 		2 1 12.8 M 35 ZeroCERT

10 2022-10-28 17:21 BHGgTtTtgtG.exe  

7512087827c35d33ff03468850968b0e


PWS[m] RAT email stealer Generic Malware Downloader Antivirus Socket DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process malicious URLs Windows ComputerName DNS Cryptographic key DDNS 		2 1 12.0 M 27 ZeroCERT

11 2022-10-28 17:17 BCDGFJFJGHKJK.exe  

ee17a84bf597ef822d3264bf3b8c30c9


PWS[m] RAT email stealer Generic Malware Downloader Antivirus DGA Socket DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs Windows ComputerName DNS Cryptographic key DDNS 		2 1 13.0 M 45 ZeroCERT

12 2022-10-28 17:15 DFGHHDJFDDFDFJDJ.exe  

50807a033f29ce6ea0e822a4f0b4e60f


RAT Generic Malware task schedule Antivirus AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process Windows ComputerName DNS Cryptographic key DDNS 		2 1 11.8 M 35 ZeroCERT

13 2022-10-28 17:14 HFMN,N,JGHJH.exe  

d52446f23b3f32482c2f9463e73a2e9c


RAT AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed 		18 22 2 10.2 M 39 ZeroCERT

14 2022-10-28 17:13 MNZCVNCJKG.exe  

04a33f596eca01055852772a327659a3


PWS[m] RAT email stealer Generic Malware Downloader Antivirus DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process sandbox evasion WriteConsoleW Windows Browser ComputerName DNS Cryptographic key DDNS crashed 		2 1 13.4 M 28 ZeroCERT

15 2022-10-28 17:11 HHkPoJhH.exe  

8f89c4cd81384874cea3378488944245


PWS[m] RAT email stealer Generic Malware Downloader Antivirus Socket DNS Code injection KeyLogger Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process malicious URLs Windows ComputerName DNS Cryptographic key DDNS 		2 1 12.4 M 48 ZeroCERT

keyword