popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-11-24 10:30 DFGXCVXVUIOU.exe  

ec46b84c7a3e55896233429ae3807b87


Lokibot PWS Loki[b] Loki.m RAT Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software 		4 4 10 1 13.4 24 ZeroCERT

2 2021-11-07 09:55 GRSDFSDGSD.exe  

b7426df3b449ae7ec217cfdbdc36f242


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		2 2 2.8 23 ZeroCERT

3 2021-10-16 12:39 FYI.exe  

d100485ad14f8463450278591b10c698


RAT Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS Cryptographic key DDNS 		3 1 13.8 28 ZeroCERT

4 2021-08-11 09:32 vbc.exe  

7107c22585cca5ac62b9fe39dbd9daaa


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key 		10 21 2 11.0 M 28 ZeroCERT

  • First
  • 1
  • Last
  • Total : 4cnts
keyword