popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15271 2021-11-12 09:43 invoice.docx  

936cad45145d0745ffde338ed6492615


Word 2007 file format(docx) VirusTotal Malware Microsoft MachineGuid Check memory RWX flags setting unpack itself GameoverP2P Zeus ComputerName Trojan Banking 		2 2 1 5.4 30 guest

15272 2021-11-12 10:25 vbc.exe  

6bf8602a568d0be97816ab878e1259a1


Generic Malware Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Windows Remote Code Execution crashed 		2.8 39 ZeroCERT

15273 2021-11-12 10:27 randyzx.exe  

c197f0089f58e99b1bfccf2a7cc35c2a


Malicious Library UPX Admin Tool (Sysinternals etc ...) PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		12 28 2 6.0 38 ZeroCERT

15274 2021-11-12 10:27 kolopp.exe  

c8fa153722d6621a1b3765305cc3949b


RAT Generic Malware UPX PE File PE32 .NET EXE Malware Telegram PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW IP Check Tofsee ComputerName DNS 		1 4 5 3.0 ZeroCERT

15275 2021-11-12 10:27 basque.exe  

a35732db1ce01e708084598f4dcdc1e4


Gen1 Gen2 Themida Packer Generic Malware Malicious Library UPX Malicious Packer PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself Checks Bios Detects VMWare AppData folder VMware anti-virtualization Windows Firmware crashed 		7.4 32 ZeroCERT

15276 2021-11-12 10:29 ....-.......................-....  

c4d7770f7d9230c9b9167a4327ae32c7


RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 6 4.4 26 ZeroCERT

15277 2021-11-12 10:29 bk.exe  

37c946e015b62829b4c65d73ab5a3225


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.2 24 ZeroCERT

15278 2021-11-12 10:31 serverzx.exe  

1dadf13b8e0441e370eacb0b774c64e9


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.0 24 ZeroCERT

15279 2021-11-12 10:31 9431_1636644172_2842.exe  

9be7ba9afcb345e57ed908bb4947ea01


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.4 39 ZeroCERT

15280 2021-11-12 10:34 mann.exe  

ca85468ce80c097f6b55c9038990c860


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Telegram PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW IP Check Tofsee ComputerName DNS 		1 4 5 3.8 26 ZeroCERT

15281 2021-11-12 10:34 arinzezx.exe  

098bdb5132fe39c863a5bbfb5681204a


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.4 19 ZeroCERT

15282 2021-11-12 10:36 hussanzx.exe  

ab00b875e9d7ec4065d7dbbda08d474a


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed 		8.0 43 ZeroCERT

15283 2021-11-12 10:38 sirmyzx.exe  

5ce9bc025711280fa8e91f12fa39e5ec


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.4 14 ZeroCERT

15284 2021-11-12 10:38 man.exe  

9405cc577b6643f6de285118154fea28


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 5 1 8.2 30 ZeroCERT

15285 2021-11-12 10:39 237.exe  

c8753945c41821a7e3d9f5da2091cfb9


Gen1 RAT Gen2 Generic Malware Malicious Library UPX Malicious Packer ASPack PE File PE32 DLL OS Processor Check PE64 Malware download Raccoon VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency RecordBreaker MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder installed browsers check Tofsee Stealer Windows Browser Email ComputerName DNS 		5 5 6 9.8 24 ZeroCERT

keyword