popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15031 2021-11-07 09:34 index-1862925899.xls  

18e464bb54f5c85ea6caf14487ced92c


Downloader MSOffice File ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 4.4 guest

15032 2021-11-07 09:36 index-1863186207.xls  

a6dc8902798b7e3ba6a7984f2a2593ad


Downloader MSOffice File VirusTotal Malware ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 5.0 10 guest

15033 2021-11-07 09:38 index-1863934855.xls  

8584ca265513d78b293331cc0e446f34


Downloader MSOffice File ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 4.4 guest

15034 2021-11-07 09:44 2321_1636188522_6879.exe  

e78c12a4bd00e94b07db805c153985cf


PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 7.6 24 ZeroCERT

15035 2021-11-07 09:44 702_1636110597_938.exe  

9769dd7aa91d1195becb8da72f4b9fbe


PWS Loki[b] Loki.m AgentTesla RAT browser info stealer Generic Malware UPX Code injection ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself Tofsee Windows DNS Cryptographic key crashed 		2 3 7.8 37 ZeroCERT

15036 2021-11-07 09:45 cruz_image.mp3.html  

a7ecdee268d12efae0f5cacc6ac5418b


Antivirus VirusTotal Malware unpack itself crashed 		1.2 15 ZeroCERT

15037 2021-11-07 09:46 j.exe  

6c1bf5fd5e33a68d980525c71cacf1d8


Generic Malware PE64 PE File VirusTotal Malware 		1.8 39 ZeroCERT

15038 2021-11-07 09:47 rundll32.exe  

5a66a0ab975ee61f330feb2af7b08d52


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder malicious URLs Windows 		8 12 2 4 9.8 M ZeroCERT

15039 2021-11-07 09:48 .csrss.exe  

6aebd56c7cbd1a5ee218f2ef40c6133e


Loki PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.8 31 ZeroCERT

15040 2021-11-07 09:49 200.exe  

d3d8953a702ac5187dc16e54c280074f


Generic Malware Themida Packer Anti_VM UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 9.2 27 ZeroCERT

15041 2021-11-07 09:50 rollerkind2.exe  

ebff6c5c942d1800caef3eda207889d3


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 25 ZeroCERT

15042 2021-11-07 09:51 UUQf0owhn8UWJCz.exe  

5917d602f423946e08474241e6a731a7


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		4 14 1 2 8.4 M 40 ZeroCERT

15043 2021-11-07 09:53 6788_1636125081_7928.exe  

bb8eeb02cb24e79c0ad10842b537a7bc


Generic Malware Themida Packer UPX AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 12.4 41 ZeroCERT

15044 2021-11-07 09:53 vbc.exe  

6803bb0ea46eca1dc973c636efd058fb


Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		3 4 1 3.6 41 ZeroCERT

15045 2021-11-07 09:55 GRSDFSDGSD.exe  

b7426df3b449ae7ec217cfdbdc36f242


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		2 2 2.8 23 ZeroCERT

keyword