popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-08-06 10:00 YCUMy7OsLy2HRs6.exe  

ed6c05676795aec8b92b73201c000b3b


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		9.8 M 33 ZeroCERT

2 2021-08-04 12:28 vbc.exe  

302f2eb940ca97b21128171b43cf20b7


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		5.6 37 guest

3 2021-08-03 09:29 .csrss.exe  

8894b0f72764e1754c1d415dcda7b7f9


Lokibot PWS Loki[b] Loki[m] .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 3 7 1 14.4 M 20 ZeroCERT

4 2021-08-03 09:26 vbc.exe  

0051d352f44660bd6ff45ebcb806139d


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 Malware download AsyncRAT Dridex NetWireRC TrickBot VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Kovter Windows ComputerName DNS Cryptographic key 		1 2 10.8 M 17 ZeroCERT

5 2021-08-03 09:12 win32d.exe  

5c8fdd6c67790256bda928d03cf524a9


AgentTesla PWS .NET framework RAT browser info stealer Generic Malware Google Chrome User Data UPX Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		3 1 12.2 M 36 ZeroCERT

6 2021-08-03 07:55 win.exe  

d77ca8ffc57b9dd974928a09fe6722b0


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		2 4 2 8.4 14 ZeroCERT

7 2021-08-02 17:59 .audiodg.exe  

b8b8f8d19a603555ddd886a77c751211


PWS Loki[b] Loki[m] .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 6 1 14.0 M 20 ZeroCERT

8 2021-08-02 17:56 .smss.exe  

f5463dbb6131a4c2643af3700f14095b


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS crashed 		2 2.8 20 ZeroCERT

  • First
  • 1
  • Last
  • Total : 8cnts
keyword