popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15346 2021-11-13 13:18 vbc.exe  

c41c0066207793508de97c4c5d157f70


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 2 2 12.2 22 ZeroCERT

15347 2021-11-13 13:20 loads3.exe  

9453aa71524267a1ec46a7272db3f9e0


Malicious Library UPX PE File OS Processor Check PE32 PDB unpack itself 		1.0 ZeroCERT

15348 2021-11-13 13:25 loader1.exe  

18208aa1787da8cb3bfe2289a4a4a423


Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		15 27 2 3 7.0 35 ZeroCERT

15349 2021-11-13 13:26 mar-signature_request.exe  

479cffcb45bfb5e8b97858ce3cb2c128


Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder Browser ComputerName DNS crashed 		1 7.0 24 ZeroCERT

15350 2021-11-14 18:08 miner.exe  

3762bab8e1146f8ae6abd90d97b30cb9


Generic Malware PE64 PE File VirusTotal Malware 		1.4 39 ZeroCERT

15351 2021-11-14 18:09 7742_1636811177_5077.exe  

aa557208f21ea676ff97d6cee2566ffe


RAT Generic Malware UPX Socket DNS Internet API Code injection ScreenShot Http API persistence AntiDebug AntiVM PE File PE32 .NET EXE Malware download VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee DNS 		2 3 2 9.4 2 ZeroCERT

15352 2021-11-14 18:10 uk.exe  

e0d0f69523666930260d57f7a5484038


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS crashed 		1 9.4 27 ZeroCERT

15353 2021-11-14 18:10 dllhost.exe  

1ad9efcddab819d24cca2f9323395f9e


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows 		2 4 1 9.8 38 ZeroCERT

15354 2021-11-14 18:13 vbc.exe  

c4318a253bdb17851bcbee433dc988c4


Loki PWS Loki[b] Loki.m RAT Generic Malware Antivirus Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		2 2 7 1 16.2 36 ZeroCERT

15355 2021-11-14 18:13 dllhost.exe  

7d22b7632fc02e12438e7748eca086b4


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 4 1 8.0 22 ZeroCERT

15356 2021-11-14 18:14 231.exe  

cfc59bc8b478578358711bbc68506c3b


AntiDebug AntiVM PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 15.0 22 ZeroCERT

15357 2021-11-14 18:14 Client.exe  

be5c1be0364b3ec5644e1ae66fb1438b


Generic Malware Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 Malware download VirusTotal Malware PDB buffers extracted DNS 		1 1 2.6 39 ZeroCERT

15358 2021-11-14 18:16 S.exe  

cdfb55fc43a7b0a4e5e13f8c0af5f6a6


Generic Malware Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 42 ZeroCERT

15359 2021-11-14 18:17 ShareFolder.exe  

48b0a9eff9c4934c0b0b8875b8867ac5


Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		1 3.2 46 ZeroCERT

15360 2021-11-14 18:19 232.exe  

d612f933a765ea9a122d3f66b9f278a8


RAT PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself Collect installed applications anti-virtualization installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		1 1 6.4 41 ZeroCERT

keyword