popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15211 2021-11-10 18:14 9819_1636144096_7282.exe  

d2a7e15bafee524ad1f0eb7174fca6e6


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 50 ZeroCERT

15212 2021-11-10 18:16 7993_1636371023_9825.exe  

bde1dbafbe609f7da66db66356d8f9e3


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.4 36 ZeroCERT

15213 2021-11-10 18:19 7667_1636198353_7510.exe  

74e5ee47e3f1cec8ad5499d20d5e200d


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 7 1 14.0 35 ZeroCERT

15214 2021-11-10 18:21 5675_1636449658_2701.exe  

510129781d403976345afea3bdb4e426


Themida Packer Anti_VM UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.4 24 ZeroCERT

15215 2021-11-10 18:23 7525_1636260291_3969.exe  

273fc85ec0936207047fae24cf7630bf


RAT Generic Malware UPX AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself anti-virtualization Windows ComputerName DNS Cryptographic key 		1 9.4 27 ZeroCERT

15216 2021-11-10 18:25 8071_1636483658_131.exe  

df90b2e12b0377db82d6a1cdcf3b8ad8


RAT Generic Malware PE64 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself Collect installed applications Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 7.2 23 ZeroCERT

15217 2021-11-10 18:29 ServicedetailforDARevision.pdf  

e822e0070c7f84af44407fd2fdfee044


PDF unpack itself Windows utilities Windows 		1.4 ZeroCERT

15218 2021-11-10 20:18 AZ AMS Roster Import.exe  

dc68284a79d3299b382ffdf1f4be2f92


North Korea RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		2.0 14 guest

15219 2021-11-11 07:39 winl.exe  

20126108d90d62860119d71b7525988b


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.8 27 ZeroCERT

15220 2021-11-11 07:50 rfsfjuyz.exe  

08f198a71bb460e8b4b92f148eac13bf


PWS Loki[b] Loki.m Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 7.4 60 ZeroCERT

15221 2021-11-11 07:52 ConsoleApp17.exe  

521339ae9fa89c3af1b50456781272a8


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key crashed 		16 20 2 6 8.8 17 ZeroCERT

15222 2021-11-11 09:31 ConsoleApp17.exe  

521339ae9fa89c3af1b50456781272a8


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key crashed 		2 1 1 8.8 17 guest

15223 2021-11-11 10:10 ConsoleApp17.exe  

521339ae9fa89c3af1b50456781272a8


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key crashed 		2 1 1 8.8 17 guest

15224 2021-11-11 11:30 ConsoleApp17.exe  

521339ae9fa89c3af1b50456781272a8


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key crashed 		2 1 1 8.8 17 guest

15225 2021-11-11 12:33 lots.exe  

5575302eba0ea0e5f6b9fda28d1e1eb7


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 25 ZeroCERT

keyword