popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15316 2021-11-13 11:20 9565_1636743030_8404.exe  

8d9328dd33c28b417ff4909192e276d5


RAT PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications anti-virtualization installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 8.2 23 ZeroCERT

15317 2021-11-13 11:21 .csrss.exe  

6009a6b7f11df3bb0c659e0772e617c1


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		4 10 1 10.0 44 ZeroCERT

15318 2021-11-13 11:22 file_01.exe  

1cf8a1b380edfa63134bed8ef0a4062d


Malicious Library UPX PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 10.8 26 ZeroCERT

15319 2021-11-13 11:23 vbc.exe  

6aed2cef774b6b6e9fe38a2e804fe561


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 2 2 12.4 38 ZeroCERT

15320 2021-11-13 11:24 ben.exe  

3e1e27b5fc6dda21675ad901ab59c391


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.0 37 ZeroCERT

15321 2021-11-13 11:24 2905_1636735632_746.exe  

3bd6f1203d096e38b85b1d72ea5b0c2c


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 25 ZeroCERT

15322 2021-11-13 11:26 version-1561770706.xls  

31416ebbc605c43a9683d27920d7800c


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		2 4 2 3.6 guest

15323 2021-11-13 11:27 .winlogon.exe  

f2a5e9b90a3c266f888fe2d839048950


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 11.2 30 ZeroCERT

15324 2021-11-13 11:29 xtain.exe  

2373461f92033cdb39e3893a5ad1f123


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 5 1 8.4 40 ZeroCERT

15325 2021-11-13 11:29 .winlogon.exe  

4171b0923b78c2e5322eea578d54937c


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 12.4 41 ZeroCERT

15326 2021-11-13 11:31 version-1561719888.xls  

0e4546d44dc83700a936d8b6b81475f1


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		2 4 2 3.6 guest

15327 2021-11-13 11:32 5752_1636656439_9604.exe  

1790eae1cc50666ee6239bdd13123039


Malicious Library UPX AntiDebug AntiVM PE File PE32 OS Processor Check DLL Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process WriteConsoleW VMware anti-virtualization installed browsers check Stealer Windows Browser Email ComputerName Firmware DNS crashed 		2 1 4 18.6 34 ZeroCERT

15328 2021-11-13 11:33 Win_32Activator_kl_nt4_Itself....  

98101e48213904b5ea6e88856f361040


Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		9.0 16 ZeroCERT

15329 2021-11-13 11:36 macc.exe  

1fc555b7fcb6c2587e8a51c215f10dfe


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		5 15 1 2 9.2 M 40 ZeroCERT

15330 2021-11-13 13:00 vbc.exe  

ad21e35c0fae8bdeda31a26faa028305


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 47 ZeroCERT

keyword