popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2022-07-29 09:42 vbc.exe  

e3f61572c6aff7954e948d5e829593b1


Formbook PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		8 16 3 11.6 M 36 ZeroCERT

2 2022-07-28 09:41 paa.exe  

5582e1c745e771410a2965357131b053


Formbook PWS .NET framework AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		6 13 1 10.0 M 50 ZeroCERT

3 2022-07-28 09:28 scrss.exe  

3974f1aac0c9b865dba7d775ade14aac


PWS[m] PWS .NET framework NPKI email stealer Socket DNS Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS 		3 1 13.2 M 51 ZeroCERT

4 2021-07-15 11:34 .wininit.exe  

a4231c7431f34ce5f1aeecd2c366008a


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		16 15 9.0 40 ZeroCERT

5 2021-07-14 09:02 crpYSZLkHw0n3SH.exe  

3b2369bdc8d2d7d0712a4e9cfb21e299


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE32 PE File .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.2 20 ZeroCERT

6 2021-06-06 09:53 loud-0098.exe  

bf93de4660852c5c49dfba5cb0b87fd1


AsyncRAT backdoor PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Anti_VM Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName DNS Cryptographic key crashed 		2.6 11 ZeroCERT

7 2021-05-26 09:45 y5.exe  

a923bf5fba472d85713560b15ccede99


PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.4 M 28 ZeroCERT

8 2021-05-25 18:06 mna.exe  

df8c895d1e6b9fb4e3914a6c4b7e3a31


PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		12.8 30 ZeroCERT

9 2021-04-27 07:44 PAa4O8FlG6VW063.exe  

b1149708e8e0bbe6d4c5817e3a14eed6


PWS .NET framework Malicious Library AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11.6 22 ZeroCERT

10 2021-04-26 17:59 winlog.exe  

4b233f24f3a1a17bb7e23f49e7589806


PWS .NET framework Malicious Library AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows Cryptographic key 		9.6 M 24 ZeroCERT

  • First
  • 1
  • Last
  • Total : 10cnts
keyword