popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14986 2021-11-05 10:43 serwices.exe  

486700627b68a06007dac77bd7efebb4


[m] Generic Malware Themida Packer task schedule Anti_VM UPX AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare WriteConsoleW VMware anti-virtualization Windows ComputerName Firmware crashed 		10.8 35 ZeroCERT

14987 2021-11-05 10:45 r4XZt5MYHpEdcdmzqr2D.exe  

fffd2903ec20ac275330f9d1d36f991d


Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces ComputerName crashed 		1 2 4.6 44 ZeroCERT

14988 2021-11-05 10:45 vbc.exe  

898badd240f8d99c109b1c8647eaa1f1


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.8 22 ZeroCERT

14989 2021-11-05 10:47 udptest.exe  

f98dfeecf4e63cb4d768f41491cc9a0b


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 28 ZeroCERT

14990 2021-11-05 10:50 v8hBqWuKscbjZRqNatPw.exe  

b5bd8dfef7366e06844f2b8595dd9910


Generic Malware UPX PE File PE32 .NET EXE MachineGuid Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder Windows ComputerName 		1 4 1 5.2 ZeroCERT

14991 2021-11-05 10:51 194.exe  

9f478f53a757528c33e577205a94d607


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows DNS Cryptographic key 		1 6 1 10.0 21 ZeroCERT

14992 2021-11-05 10:52 toolspab2.exe  

59a629eeabebab84b2c62d33f3867503


Malicious Library UPX AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself Remote Code Execution 		7.2 28 ZeroCERT

14993 2021-11-05 10:53 app.exe  

3c3046f640f7825c720849aaa809c963


UPX PE File PE32 VirusTotal Malware suspicious privilege WMI Tofsee Windows ComputerName DNS 		6 16 6 6.0 56 ZeroCERT

14994 2021-11-05 10:54 sqlservr.exe  

ce22ab6e0ddcefdc45a9f9dae97c0dd0


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		2 13.2 8 ZeroCERT

14995 2021-11-05 10:54 mpomzx.exe  

46cb216976e96c5177b934976db5f078


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 5 1 8.2 36 ZeroCERT

14996 2021-11-05 10:56 HttpTwcyK3R6gQj7t7EY.exe  

66569d09ee7a064449b6890633d0a6aa


Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself crashed 		1.8 25 ZeroCERT

14997 2021-11-05 10:56 ShareFolder.exe  

41afb6916c0587f605747a7391a8793c


Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		3 3.0 37 ZeroCERT

14998 2021-11-05 10:58 malik_2.0.exe  

d289a9602c2d07bbf8f4edc37051af6a


RAT PWS .NET framework Generic Malware Malicious Packer PE File PE32 .NET EXE VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself ComputerName DNS 		3 4.2 25 ZeroCERT

14999 2021-11-05 11:00 pub33.exe  

bd1b477a9483e240ef5eef54145a13cd


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 29 ZeroCERT

15000 2021-11-05 11:01 autosubplayer.exe  

7ad11140cb494327c5d935d921b2bdf2


Malicious Library UPX PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.8 24 ZeroCERT

keyword