popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15361 2021-11-14 18:19 7587_1636789492_9651.exe  

fcb63eaba491f872aa88f9ae02f257f9


Lazarus Family Themida Packer Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 9.2 40 ZeroCERT

15362 2021-11-14 18:21 Radiophony.exe  

e639300660165b56b26ae9e713bd2ccd


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.0 34 ZeroCERT

15363 2021-11-14 18:21 Request_000517_031077PDF.exe  

bcf64360f1b1dd0f4dbb00f69fb1637c


RAT Generic Malware Malicious Library UPX SMTP KeyLogger AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 14.8 42 ZeroCERT

15364 2021-11-14 18:23 6040_1636637595_6269.exe  

84dd06d1e6237944e337d213947e1949


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 49 ZeroCERT

15365 2021-11-14 18:23 9763_1636793427_1532.exe  

eab61e05d00c017bc2e4d719277406b8


RAT PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself anti-virtualization Windows ComputerName DNS Cryptographic key 		1 4.8 23 ZeroCERT

15366 2021-11-14 18:25 Irreducible.exe  

7aa7dc1797e0902324acf13aab289ced


RAT Generic Malware PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 5 ZeroCERT

15367 2021-11-14 18:25 search1001.exe  

9ff93d97e4c3785b38cd9d1c84443d51


Generic Malware Malicious Library UPX AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself WriteConsoleW 		6.8 48 ZeroCERT

15368 2021-11-14 18:28 friday.exe  

75901df8091e9769971fb550d1de2144


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.0 33 ZeroCERT

15369 2021-11-14 18:29 vbc.exe  

862cc74dadd15cd9f8cebfbd23dcf07f


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		6 16 1 8.0 27 ZeroCERT

15370 2021-11-14 18:29 7870_1636781441_9630.exe  

d985b4cfdceecc3c0fe4f3e4fda4e416


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.0 36 ZeroCERT

15371 2021-11-14 18:32 vbc.exe  

412241a9318ff1dac966423d98e42ca6


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		8 17 2 1 8.2 M 38 ZeroCERT

15372 2021-11-14 18:32 ganfarm.exe  

79e8c2be36b9fb14ae33b6a0ca26c503


AntiDebug AntiVM PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 15.0 21 ZeroCERT

15373 2021-11-14 18:32 211_1636780637_5258.exe  

7186ace185636ae6370b741b93ca8d0f


AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 12.2 22 ZeroCERT

15374 2021-11-14 18:34 tK9mduyBPQVh9gvP.exe  

83a39ec648f04bdfc64288a4c503c7ba


Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces ComputerName crashed 		1 2 4.6 44 ZeroCERT

15375 2021-11-14 18:36 1713_1636727569_1149.exe  

8ba1ad22db58fccdca33c2def32062b5


RAT Generic Malware PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		1 3 1 6.6 37 ZeroCERT

keyword