popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15151 2021-11-09 10:06 callyzx.exe  

9ad32640d60932d2bda2fa6d65435019


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 1 7.8 15 ZeroCERT

15152 2021-11-09 10:08 7149_1636211541_7624.exe  

65ecbb1c38b4ac891d8a90870e115398


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 42 ZeroCERT

15153 2021-11-09 10:10 vbc.exe  

08588477f0297262109025dcdf0a3237


RAT PWS .NET framework Ave Maria WARZONE RAT Generic Malware Admin Tool (Sysinternals etc ...) Malicious Packer Malicious Library UPX DNS AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder human activity check Tofsee Windows ComputerName Cryptographic key keylogger 		1 6 1 16.2 27 ZeroCERT

15154 2021-11-09 10:10 9807_1636022097_3475.exe  

c591e112978c89efa345907759db9363


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 36 ZeroCERT

15155 2021-11-09 10:10 artifact.exe  

eba3ab1cdf7058b3cb52fe63dd2950df


Malicious Library PE File PE32 VirusTotal Malware RWX flags setting DNS 		2 3.6 53 ZeroCERT

15156 2021-11-09 10:12 vbc.exe  

46c3f0a11804275f801722c913efbc44


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		2 2 7 1 14.0 21 ZeroCERT

15157 2021-11-09 10:14 vbc.exe  

225d57c6cfe5370d9e8433ce7466c5e1


PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.6 44 ZeroCERT

15158 2021-11-09 10:18 vbc.exe  

88d735da9f8ca6d1cfb1ff692715cc8b


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces Tofsee Windows DNS Cryptographic key 		9 19 2 1 12.6 33 ZeroCERT

15159 2021-11-09 10:19 .csrss.exe  

db35515ceab913ff5f5802c0bd9ebf70


PWS Loki[b] Loki.m RAT .NET framework Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.6 20 ZeroCERT

15160 2021-11-09 10:21 val.exe  

892c9fd3a36e5344a74a21961350084d


AgentTesla(IN) RAT Generic Malware Malicious Packer Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key crashed 		5.2 40 ZeroCERT

15161 2021-11-09 10:23 soccer.png  

292276fb4e37646aeca245bffb21ef21


PE File PE32 DLL Dridex TrickBot Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 4 4 1 5.4 M ZeroCERT

15162 2021-11-09 10:54 ascvjkfd.exe  

115d4ac308403ea6cffaf5d7ff23a501


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself Check virtual network interfaces ComputerName DNS 		1 5.4 M 58 guest

15163 2021-11-09 13:22 gTiBAFGxjBXmnkn.mp3  

e44025fdc31cdce162ed7573b6c501f5


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.8 44 guest

15164 2021-11-09 13:39 gTiBAFGxjBXmnkn.mp3  

e44025fdc31cdce162ed7573b6c501f5


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.8 44 guest

15165 2021-11-09 14:03 nncncd.txt.ps1  

86d95bf7851b34a2eddf0cb4fc6c8988


Generic Malware Antivirus VirusTotal Malware powershell Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 5.6 3 ZeroCERT

keyword