popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8791 2021-05-26 09:34 IMG_085_163_771.exe  

719fad1c99b366347fabab8b752a1826


AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 9.2 M 15 ZeroCERT

8792 2021-05-26 09:32 ahk.jpg  

4a5f8a1e40fb9eab2b8bd55efbe61a83


Gen2 Antivirus PE File OS Processor Check PE32 VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 7.2 M 26 ZeroCERT

8793 2021-05-26 09:26 ConsoleApp1.exe  

17b32d5270a778baa555f13bb3c25b14


AsyncRAT backdoor Gen1 AntiDebug AntiVM .NET EXE PE File PE32 DLL OS Processor Check JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee OskiStealer Stealer Windows Browser Email ComputerName Trojan DNS Downloader Password 		11 4 15 13.4 M 22 ZeroCERT

8794 2021-05-26 09:07 Document%20093250.xls  

662ed1aced50cad399d305467f290fea


VBA_macro MSOffice File VirusTotal Malware Checks debugger WMI unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName DNS crashed 		1 3 1 8.0 20 ZeroCERT

8795 2021-05-26 09:00 PL_175_063_107.exe  

e2f9e8c9bc0c758d98ee96ff0779076c


AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 9.2 13 ZeroCERT

8796 2021-05-26 08:58 IMG_078_36_110.exe  

7991a1408bbb33e32dab67230cb4a0ff


AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 8.0 17 ZeroCERT

8797 2021-05-25 10:22 http://176.111.174.74/ACC.exe  

1b566412e52165a3ef457cc7dd0ecfba


AgentTesla AsyncRAT backdoor PWS .NET framework Malicious Library DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 6 6.0 M 26 Kim.GS

8798 2021-05-24 09:17 ehn410274214523502210vlbxohwp4  

bc5d3090b4ec7ece19ce132d14c0e111


VBA_macro MSOffice File VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		8 14 3 4.4 M 41 ZeroCERT

8799 2021-05-23 10:55 Setup.exe  

d69ad8d2f432e57d4f5ecf5d7e7f9300


Emotet AsyncRAT backdoor PWS .NET framework Gen1 Glupteba BitCoin Generic Malware Anti_VM VMProtect AntiDebug AntiVM PE File PE32 DLL .NET DLL .NET EXE GIF Format OS Processor Check PE64 Browser Info Stealer VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion VMware IP Check VM Disk Size Check installed browsers check Tofsee Ransomware GameoverP2P Zeus Windows Browser ComputerName Trojan Banking Amazon DNS Cryptographic key crashed keylogger 		28 39 10 3 25.2 M 35 ZeroCERT

8800 2021-05-23 10:46 kakashi_cry.exe  

62c59ba0375eebf49b4d80c290e69646


AsyncRAT backdoor PWS .NET framework .NET EXE PE File PE32 Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process Tofsee Windows 		1 3 1 6.4 ZeroCERT

8801 2021-05-23 10:23 hbggg.exe  

e6f6fd13001b8df1af345df56caba5de


Gen2 Emotet PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Malicious Traffic Check memory Creates executable files Check virtual network interfaces AppData folder IP Check Tofsee Browser Remote Code Execution DNS 		5 8 2 2 7.0 M 50 ZeroCERT

8802 2021-05-23 10:13 BBSbacket.exe  

e19f8b76b5a0c4959fcb41fe5b46ad80


AsyncRAT backdoor PWS .NET framework BitCoin AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		3 5 2 1 11.8 M 30 ZeroCERT

8803 2021-05-21 16:34 ConsoleApp19.exe  

ccf10dc1a6d121efdf9c28443a56e8b7


AsyncRAT backdoor Ave Maria WARZONE RAT Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 17.0 M 18 ZeroCERT

8804 2021-05-21 16:33 ConsoleApp9.exe  

0f938ac4802642b34cc7105fb04c32ac


AsyncRAT backdoor AgentTesla Ave Maria WARZONE RAT Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 17.6 M 21 ZeroCERT

8805 2021-05-21 10:23 PO%2006336801.xls  

f9288646e623a8a8f0fa5ff5f6b5e3d6


VBA_macro MSOffice File VirusTotal Malware ICMP traffic unpack itself Tofsee 		10 20 2 3.6 23 ZeroCERT

keyword