popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15136 2021-11-09 09:51 tracking.php  

819b1896050b11f6ffdd835f6249874e


VBA_macro Generic Malware MSOffice File VirusTotal Malware RWX flags setting unpack itself 		1.4 18 ZeroCERT

15137 2021-11-09 09:52 vbc.exe  

5ecf66273f0e0a3755cc65792c0379dc


Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		2 4 1 3.0 17 ZeroCERT

15138 2021-11-09 09:53 4166_1636313583_7068.exe  

ec7ad2ab3d136ace300b71640375087c


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		1 2 1 3.8 34 ZeroCERT

15139 2021-11-09 09:53 vbc.exe  

d3a28d6192b09520c8f39eca65b79d5e


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 12.6 21 ZeroCERT

15140 2021-11-09 09:55 7189_1636325531_3217.exe  

0dd386e2ac96f7ddd2206510b6d74663


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.4 39 ZeroCERT

15141 2021-11-09 09:55 vbc.exe  

0dabcdb8e3d8768527502f784841c91f


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.8 37 ZeroCERT

15142 2021-11-09 09:57 vbc.exe  

78b7c32f47c124fba8f540b418d17681


NSIS Malicious Library UPX Admin Tool (Sysinternals etc ...) PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 10.8 27 ZeroCERT

15143 2021-11-09 09:57 loads3.exe  

f4c5d3ee974deea5fed544c55e6b7d7c


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 27 ZeroCERT

15144 2021-11-09 10:00 nna.exe  

7c997ad970ecdce19a66d96d27b62c25


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 11.0 24 ZeroCERT

15145 2021-11-09 10:01 vbc.exe  

07c8b350b0d3e84f8e44c5e45b7f0b42


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		8 17 1 1 8.0 25 ZeroCERT

15146 2021-11-09 10:02 de.exe  

9dcb608ed0cf8fcf1bf1b88b62b72b40


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 10.4 25 ZeroCERT

15147 2021-11-09 10:03 vbc.exe  

b85423e5c62d589bf7ac49e3067eb623


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		7 16 1 1 8.6 21 ZeroCERT

15148 2021-11-09 10:04 seasonzx.exe  

ac0ff10a492ecdc35a120afd52b662b1


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 2 8.8 14 ZeroCERT

15149 2021-11-09 10:06 prescos.exe  

32b7b97a9f131f197565167b4fe8f2ed


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows 		13 21 1 4 11.2 23 ZeroCERT

15150 2021-11-09 10:06 4435_1636055582_9819.exe  

4116bb07f7477531f3d4284966b93dd8


RAT Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself anti-virtualization Windows ComputerName DNS Cryptographic key 		1 8.4 44 ZeroCERT

keyword