popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15121 2021-11-08 16:03 gTiBAFGxjBXmnkn.mp3  

e44025fdc31cdce162ed7573b6c501f5


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.8 44 guest

15122 2021-11-08 18:17 1503_1636030253_4690.exe  

7a76eef4029a2403e3d912bd299c8c85


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 43 ZeroCERT

15123 2021-11-08 18:19 1997_1636317182_5952.exe  

a948eafa51f0a22337dc747dde057864


RAT Generic Malware Malicious Packer UPX ASPack Malicious Library Antivirus AntiDebug AntiVM PE File PE32 .NET EXE PE64 OS Processor Check Browser Info Stealer VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName Cryptographic key crashed 		3 8 4 17.8 25 ZeroCERT

15124 2021-11-08 18:19 997_1636274799_3110.exe  

58af6048e61d849aad0ab2ecfc80fbc7


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		1 2 1 3.8 33 ZeroCERT

15125 2021-11-08 18:20 8194_1636301703_9028.exe  

91d4d9e326c8fc248005b8d1ab6ce48b


PWS Loki[b] Loki.m AgentTesla RAT browser info stealer Generic Malware Antivirus Code injection ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 8 3 12.8 24 ZeroCERT

15126 2021-11-08 18:21 2250_1636094639_2454.exe  

75b5f08705e2583250dfcc7e6ec22015


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 3.6 50 ZeroCERT

15127 2021-11-08 18:21 sqlservr.exe  

44467361d4da792208493674019ebf27


PWS Loki[b] Loki.m RAT .NET framework Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 12.4 18 ZeroCERT

15128 2021-11-08 18:23 2444_1636306218_6409.exe  

836fce87deb457a5ec93f942091c9afc


PE File PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		1 6.8 32 ZeroCERT

15129 2021-11-09 07:54 VIPETSDYSYUYSDYSSIUSUDYUSDUISD...  

42a9c8228cc642a1ce4337a81f2e62fc


RAT Generic Malware PE File PE32 .NET DLL DLL VirusTotal Malware PDB 		0.6 1 ZeroCERT

15130 2021-11-09 07:59 vbc.exe  

3df4f06ab44a96ffccf63b43b46aeafd


PWS Loki[b] Loki.m Generic Malware Admin Tool (Sysinternals etc ...) Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 12.8 18 ZeroCERT

15131 2021-11-09 08:01 doc_0002939399330.wbk  

2137a5a55ef05911b840631754c6141a


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		2 3 13 5.0 32 ZeroCERT

15132 2021-11-09 09:46 .csrss.exe  

954b35c0135d4044ac1ae985dc7d6c51


PWS Loki[b] Loki.m RAT .NET framework Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 13.6 22 ZeroCERT

15133 2021-11-09 09:48 vbc.exe  

39019e861a94f5908ec2e6e512082c8c


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 18 2 7.8 15 ZeroCERT

15134 2021-11-09 09:49 JBEE.exe  

008b7b002cfe2e0b82283464a9abd835


AgentTesla(IN) RAT Generic Malware Malicious Packer Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		5.6 36 ZeroCERT

15135 2021-11-09 09:49 vbc.exe  

acc0e6bdc5eaf1885f843ee8016758a1


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		2 2 7 1 12.8 16 ZeroCERT

keyword