popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-09-24 09:20 vbc.exe  

7b74904762e17b9fc2337043401456cd


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		14 15 1 8.8 M 46 ZeroCERT

2 2021-09-24 09:19 vbc.exe  

8fdf6032932fa1a0c9b0fd342ee8bee1


RAT PWS .NET framework Gen2 Gen1 Emotet CryptBot Formbook Generic Malware NSIS Malicious Library Malicious Packer UPX Antivirus Admin Tool (Sysinternals etc ...) Anti_VM ASPack KeyLogger ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check Browser Info Stealer VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Windows Browser ComputerName 		11.4 M 38 ZeroCERT

3 2021-09-22 22:25 hussanzx.exe  

88f75a26375befa941b2b57d7e302c32


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Software crashed 		1 1 6 1 16.8 M 27 ZeroCERT

4 2021-09-22 22:16 vbc.exe  

a96ab325cb199f7130a1496e377cdb58


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 12.8 M 18 ZeroCERT

5 2021-09-22 10:22 tiganazx.exe  

baffd35ab2f86aa9a397a286ac5df964


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		1 5 1 8.6 M 13 ZeroCERT

6 2021-09-22 10:18 vbc.exe  

15c0994e6c4cff319deb5e35339c204b


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself DNS 		8 12 2 9.6 M 34 ZeroCERT

7 2021-09-22 10:04 .winlogon.exe  

7bbd97d7b4acd4b0a3cf3bb19883c348


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.8 M 20 ZeroCERT

8 2021-09-22 09:57 4wk3N3ftnNDhOk5.exe  

722235b69b44bcc7ebcf84c4356923a0


RAT PWS .NET framework Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		12.8 M 28 ZeroCERT

9 2021-09-22 09:50 vbc.exe  

571fbd383fdd865a8232b66a32fcdea1


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 18 1 8.4 36 ZeroCERT

  • First
  • 1
  • Last
  • Total : 9cnts
keyword