Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-11-17 07:52 vbc.exe  

f14fcc9ba3f2310617eb2791db59a702


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software
1 2 7 13.6 40 ZeroCERT

2 2021-11-14 18:51 vbc.exe  

27d3f668c643e4fb0cb9d925ff18c1a4


Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key
7 16 3 1 13.0 M 42 ZeroCERT

3 2021-11-13 13:14 jet.exe  

30f4ab81bdabc5f278037984f4e44754


Loki PWS Loki[b] Loki.m Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software
2 2 7 1 13.0 38 ZeroCERT

4 2021-11-13 13:07 scene.exe  

810257cb60e0d1a1ed732106e342d2b6


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed keylogger
11.6 39 ZeroCERT

5 2021-11-13 11:01 skyzx.exe  

add49d5c2fd2a4cd8e535828536a22b5


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
9 20 1 8.0 20 ZeroCERT

6 2021-11-12 10:46 ugopoundzx.exe  

3526f3f6ea7b8bb9a4e607d0abb2fb5e


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
9 19 1 7.8 16 ZeroCERT

7 2021-11-12 10:45 obinnazx.exe  

5951b00de1dbba519c0bbef33494ced3


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
3 6 2 8.0 17 ZeroCERT

8 2021-11-12 10:42 vvs.exe  

0ca64cd14f0f39eb403c451025e37ae7


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software
1 2 7 13.0 23 ZeroCERT

9 2021-11-12 10:38 man.exe  

9405cc577b6643f6de285118154fea28


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
2 5 1 8.2 30 ZeroCERT

10 2021-11-12 10:38 sirmyzx.exe  

5ce9bc025711280fa8e91f12fa39e5ec


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software
1 2 7 12.4 14 ZeroCERT

11 2021-11-12 10:34 arinzezx.exe  

098bdb5132fe39c863a5bbfb5681204a


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software
1 2 7 12.4 19 ZeroCERT

12 2021-11-12 10:29 bk.exe  

37c946e015b62829b4c65d73ab5a3225


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software
1 2 7 13.2 24 ZeroCERT

  • First
  • 1
  • Last
  • Total : 12cnts