popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15331 2021-11-13 13:01 VBC.exe  

a183768631f68d124acdc41ae7f952ae


RAT Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 3 1 9.2 36 ZeroCERT

15332 2021-11-13 13:03 .winlogon.exe  

daf84fefe9b9a1649218f09792fdc2c4


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 12.0 27 ZeroCERT

15333 2021-11-13 13:04 .csrss.exe  

05c54117e01be9fe65f0af1b709a3e7b


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows 		4 11 1 11.8 22 ZeroCERT

15334 2021-11-13 13:05 bobo.scr  

018c7bb6e89ac68224be64da67a911e4


RAT PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.8 24 ZeroCERT

15335 2021-11-13 13:05 ctrl.exe  

40c37050c249f05871e545b3f03a6261


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 4 1 9.0 20 ZeroCERT

15336 2021-11-13 13:07 scene.exe  

810257cb60e0d1a1ed732106e342d2b6


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		11.6 39 ZeroCERT

15337 2021-11-13 13:09 loader2.exe  

cfecaaffb48e173260fd2013ba106e60


Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder Windows 		7 21 1 7.8 19 ZeroCERT

15338 2021-11-13 13:09 scan_01.exe  

7a060a1e3aa99e966da96c0ce81195ce


Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 10.4 23 ZeroCERT

15339 2021-11-13 13:10 slhost.exe  

7663a0f9957107e7ef91c493a3c85261


Themida Packer PE64 PE File VirusTotal Malware Windows DNS crashed 		1 3.0 32 ZeroCERT

15340 2021-11-13 13:11 .csrss.exe  

9467f0290a6b538c51b06a1c69499879


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 48 ZeroCERT

15341 2021-11-13 13:12 vms.exe  

34cca2013eb9b2941a65971919bf356d


Themida Packer PE File PE32 JPEG Format Malware download Amadey VirusTotal Malware AutoRuns Malicious Traffic Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process AppData folder WriteConsoleW VMware anti-virtualization Tofsee Windows Discord ComputerName Firmware crashed Downloader 		6 4 4 11.0 48 ZeroCERT

15342 2021-11-13 13:14 jet.exe  

30f4ab81bdabc5f278037984f4e44754


Loki PWS Loki[b] Loki.m Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.0 38 ZeroCERT

15343 2021-11-13 13:14 vms.exe  

2bc350586fbde00fff7707d69c30941f


Themida Packer PE File PE32 JPEG Format Malware download Amadey VirusTotal Malware AutoRuns Malicious Traffic Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare suspicious process AppData folder WriteConsoleW VMware anti-virtualization Windows ComputerName Firmware crashed 		2 2 1 11.0 43 ZeroCERT

15344 2021-11-13 13:16 sqlservr.exe  

e69812f7a7295a5cf8b7d43c3969ae8e


PWS Loki[b] Loki.m RAT Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 14.6 31 ZeroCERT

15345 2021-11-13 13:16 csrss.exe  

6c08bec27edf8a2e7bb77bf406354d3b


Loki PWS Loki[b] Loki.m RAT Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.8 23 ZeroCERT

keyword