popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15001 2021-11-05 11:17 vbc.exe  

fb86e3f69840fab7b93729f4a799f90f


Malicious Packer UPX PE File PE32 VirusTotal Malware RWX flags setting crashed 		1.6 31 ZeroCERT

15002 2021-11-05 11:17 odinikazx.exe  

44edb6a534c2542a0166dbf95edf2f81


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		11.2 15 ZeroCERT

15003 2021-11-05 11:18 190.exe  

6579ea5bd462ab008ecea9eba5c908ca


RAT PWS .NET framework BitCoin Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs IP Check installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 7 4 12.8 22 ZeroCERT

15004 2021-11-05 11:18 rat_server_x32_windows.exe  

765661ae2b8e916652f91b80d33f0592


Gen1 Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware Check memory Creates executable files AppData folder WriteConsoleW 		1.8 11 ZeroCERT

15005 2021-11-05 11:19 swhoct.exe  

51107b9099bf83dfc12a9b31ff5a7609


RAT Generic Malware Malicious Library UPX PE File OS Processor Check PE32 PE64 VirusTotal Malware PDB Check memory Checks debugger Creates executable files unpack itself 		2.6 22 ZeroCERT

15006 2021-11-05 11:23 rat_client_x32_windows.exe  

028d46daecc32df5eabf16e28b1e4174


NPKI Emotet Gen1 Generic Malware Malicious Library UPX Malicious Packer PE File OS Processor Check PE32 DLL VirusTotal Malware Check memory Creates executable files AppData folder crashed 		2.0 27 ZeroCERT

15007 2021-11-05 11:24 vbc.exe  

a37a20dbb6602b5003b237cfe2e7c2c8


Loki PWS Loki[b] Loki.m Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.0 24 ZeroCERT

15008 2021-11-05 11:25 askinstall59.exe  

c55a782fb3152c45d4d4944539b5f4ea


AgentTesla Gen2 Trojan_PWS_Stealer BitCoin browser info stealer Credential User Data Generic Malware Google Chrome Malicious Packer Malicious Library SQLite Cookie UPX Create Service DGA Socket Steal credential DNS Internet API Code injection S Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution crashed 		1 4 1 1 9.8 M 39 ZeroCERT

15009 2021-11-05 11:26 autosubplayer.exe  

d15c06743856d324a96b542a002b0aee


Malicious Library UPX PE File PE32 DLL Check memory Creates executable files unpack itself AppData folder 		2.0 ZeroCERT

15010 2021-11-05 11:28 1518_1635886867_1517.exe  

85f4a0e72f1f2945989d19d35c672e2a


Themida Packer UPX Steal credential ScreenShot Http API AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Windows Firmware crashed 		9.8 28 ZeroCERT

15011 2021-11-05 11:30 Antesternal.exe  

7c24713f4e91edad058cc94988f403e0


RAT Generic Malware PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 34 ZeroCERT

15012 2021-11-05 17:13 invc_0000020099200000.wbk  

8449fdfb6705fd1748a5ddd3db0e2050


RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Tofsee Windows Exploit DNS crashed Downloader 		9 11 8 4.4 29 guest

15013 2021-11-05 18:07 goal.exe  

5f7161a3be422edba21e4d7753fd8be4


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows ComputerName 		1 2 1 4.4 43 ZeroCERT

15014 2021-11-05 18:07 3428_1635961964_102.exe  

1862fdbfb746681b4fed4af1844004a0


Emotet Generic Malware Malicious Packer Malicious Library UPX Antivirus AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 1 12.4 M 23 ZeroCERT

15015 2021-11-05 18:09 7944_1636015327_86.exe  

a2aedc16585b7813d6aaf70717e61a02


UPX PE File OS Processor Check PE32 VirusTotal Malware WriteConsoleW 		1.4 26 ZeroCERT

keyword