popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8776 2021-05-27 10:27 AwSetp.exe  

77a3dd75a7400c15f9a95929f2f76df6


AsyncRAT backdoor Gen1 .NET EXE PE File PE32 DLL OS Processor Check Browser Info Stealer FTP Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Ransomware Windows Browser ComputerName Software crashed 		11 6 1 6 10.6 M ZeroCERT

8777 2021-05-27 10:26 BBQbrowser.exe  

81189d695443fc7f2a0adab7a6957d89


AsyncRAT backdoor BitCoin AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		3 5 3 1 10.8 M ZeroCERT

8778 2021-05-27 10:26 WLP_Setup.exe  

6bd3098fc75bd4616d1d069b41a366cd


AsyncRAT backdoor PWS .NET framework .NET EXE PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 7 3 6.2 M ZeroCERT

8779 2021-05-27 10:26 file18.exe  

495214dc4882127b4cf5480510ce440c


AsyncRAT backdoor PWS .NET framework BitCoin AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious TLD Tofsee Windows Cryptographic key crashed 		2 4 1 9.8 M 37 ZeroCERT

8780 2021-05-27 10:00 Document 70259454.xls  

fa58cb567a2ffeee77053fadf440a56f


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee 		10 26 4 3.2 M 20 ZeroCERT

8781 2021-05-27 09:56 file5.exe  

c6409dcd1888eed5d528f85c21b89162


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware Checks debugger Creates executable files unpack itself suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee DNS 		3 4 2 4.2 M 10 ZeroCERT

8782 2021-05-27 09:56 file20.exe  

e79511486f15a4f50b215af8440f25f9


AsyncRAT backdoor NPKI PWS .NET framework .NET EXE PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution Cryptographic key Software crashed 		2 4 1 6.6 M 18 ZeroCERT

8783 2021-05-27 09:56 file4.exe  

10e4779075440455a3a16bfb66aceb52


AsyncRAT backdoor PWS .NET framework .NET EXE PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution Cryptographic key Software crashed 		2 4 2 7.4 M 35 ZeroCERT

8784 2021-05-27 09:54 file19.exe  

131296e016a70ea67760fa6eec3dca8f


Anti_VM PE File PE32 VirusTotal Malware unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Tofsee Windows Firmware DNS crashed 		2 2 1 5.8 M 38 ZeroCERT

8785 2021-05-27 09:18 Document%20777622.xls  

a7b63000938bbeb31722acac4a96b004


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee 		10 19 4 2.8 20 ZeroCERT

8786 2021-05-27 09:03 PO 7080027.xls  

f1fcca46fd7af3f90aa67654250e7a05


VBA_macro MSOffice File VirusTotal Malware ICMP traffic unpack itself Tofsee 		10 20 4 4.0 M 20 ZeroCERT

8787 2021-05-26 17:40 PO 474050.xls  

8cd09ba1a0a1c52115e5419c92342708


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee 		10 20 4 3.4 M 34 ZeroCERT

8788 2021-05-26 09:52 t.exe  

ddda0d5616775408eb31992c1d602a8d


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows DNS 		2 3 8 1 3.6 18 ZeroCERT

8789 2021-05-26 09:40 jexi_cry.exe  

6245b34a94512b3f2a8b753e7b8dd24f


AsyncRAT backdoor PWS .NET framework .NET EXE PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process Tofsee Windows DNS 		1 5 1 7.6 14 ZeroCERT

8790 2021-05-26 09:36 %E5%88%9B%E8%BE%89%E4%BC%81%E4...  

b002b1aef58889242163dba60b7d6a47


Gen2 Emotet PE File OS Processor Check PE32 VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Tofsee Windows Remote Code Execution crashed 		2 4 2 5.0 M 62 ZeroCERT

keyword