Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2023-12-01 10:45 exedroidddcc.exe  

5793a999d5a84a4f10801b2f00371533


PWS KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Browser Email ComputerName crashed
9.4 M 54 ZeroCERT

2 2023-08-25 18:20 NMK9938.exe  

c573e900611f78a87d128236180d56db


Confuser .NET PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS
1 5.0 M 48 ZeroCERT

3 2023-08-24 18:11 wininit.exe  

840006dac67d23b7725020c8441a6a4b


Confuser .NET PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger unpack itself DNS
1 6.4 M 54 ZeroCERT

4 2023-08-24 07:41 wininit.exe  

932b776b87e459c404ae7e9ca38a0c7e


Formbook Confuser .NET AntiDebug AntiVM PE File .NET EXE PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself DNS
17 18 2 16 8.8 M ZeroCERT

5 2023-08-16 07:36 wininit.exe  

7f162aac8d8d2af6c52e87a85a1547e5


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
17 18 16 8.8 M 26 ZeroCERT

6 2023-08-16 07:36 wininit.exe  

64870ba5b0e92b05dc383959e02782ce


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD
22 24 20 9.6 M 48 ZeroCERT

7 2023-08-14 07:53 wininit.exe  

1188a953c9f36b374ca3714c9de1763e


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
21 22 10 7.8 M ZeroCERT

8 2023-08-14 07:47 wininit.exe  

cb38f35ebcddff1cb735acad8b65096e


Formbook Confuser .NET AntiDebug AntiVM .NET EXE PE File PE32 Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
17 18 10 7.8 M ZeroCERT

9 2023-07-28 10:26 secbobbyzx.exe  

b05e3ab4699177f4dcad8e34ceda8efb


Confuser .NET .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS
1 3 5 3.4 M 27 ZeroCERT

10 2023-06-03 17:27 H2.exe  

200f70cceffbcc69815d125f1ca40fd8


AgentTesla RAT browser info stealer Google Chrome User Data Downloader Confuser .NET Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM PE64 PE File Remcos VirusTotal Malware PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS DDNS
1 4 3 8.6 M 37 ZeroCERT

11 2023-06-02 11:12 R.exe  

75e536684503b069e3f8782abee90845


RAT Confuser .NET AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS
11 11 6 8.6 M 20 ZeroCERT

12 2023-06-02 11:11 D.exe  

7233778f2b64f9e0cf54a3a15ff91bb2


RAT Confuser .NET AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS
19 19 6 8.6 M 24 ZeroCERT

13 2023-06-02 09:23 Nano.exe  

cc23b614fd8b8174dabacc2c124742ca


RAT Confuser .NET DNS AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS
3 1 13.0 M 25 ZeroCERT

14 2022-09-02 09:41 QQBVBZCHGJHSF.exe  

9e22324dca3d7fa3b6295977c8e98a96


PWS[m] RAT SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed
11.2 M 40 ZeroCERT

15 2022-08-27 19:01 vbc.exe  

20008556b4dc2db9e96a78cc2422b98b


PWS[m] RAT SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed
2 2 11.8 M 25 ZeroCERT

  • First
  • 1
  • 2
  • Last
  • Total : 22cnts