popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15376 2021-11-14 18:36 2_f.exe  

a70df5f0cab9a6a58d218fb4f2ef9aec


Themida Packer Anti_VM UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.6 32 ZeroCERT

15377 2021-11-14 18:36 Grindstone.exe  

7e400451e3153f07e15e9079b8bed063


RAT Gen1 Generic Malware UPX Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check DLL JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check OskiStealer Stealer Windows Chrome Browser Email ComputerName DNS Cryptographic key Password 		9 2 8 15.2 32 ZeroCERT

15378 2021-11-14 18:38 247.exe  

cb4804b273c7aa139507dce67b808bf5


Generic Malware Themida Packer UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.4 23 ZeroCERT

15379 2021-11-14 18:39 nan.exe  

c545169abecbc4d469952b911066ab0b


Generic Malware Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 2 15.6 49 ZeroCERT

15380 2021-11-14 18:41 15234.exe  

85ef0b629318f502fe3602ba97de74b3


Generic Malware Antivirus PE File PE32 PE64 VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key Downloader 		1 2 1 10.0 31 ZeroCERT

15381 2021-11-14 18:43 lozzzz1_signed_4.exe  

4a0f69778cc534fc4ed63bc5e4bc946c


Gen2 Gen1 Generic Malware UPX Malicious Library Malicious Packer ASPack Antivirus Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 OS Processor Check GIF Format DLL PE64 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VMware Firewall state off anti-virtualization VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		6 12 2 23.8 24 ZeroCERT

15382 2021-11-14 18:43 41_1636810751_6422.exe  

f781a93e4bbeb163e5ff499d3a0f56af


Generic Malware Antivirus AntiDebug AntiVM PE File PE32 PE64 Browser Info Stealer VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed Downloader 		2 4 1 10.0 30 ZeroCERT

15383 2021-11-14 18:43 shrrico.exe  

4aa4dfd6b9b3ba9a2961b4a8f40d6b1b


RAT PWS .NET framework Generic Malware task schedule Malicious Library Malicious Packer UPX SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer AsyncRAT Dridex NetWireRC TrickBot VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Kovter Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 7 14.2 40 ZeroCERT

15384 2021-11-14 18:45 Request_000517_03107206PDF.exe  

f63e1268d0d33af7abee3329cb23e0cd


RAT Generic Malware Malicious Library PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself ComputerName DNS 		1 3.0 39 ZeroCERT

15385 2021-11-14 18:45 ISO_003820_03152IMG.exe  

0360f849acb6816bd3e2ddcf51ef6f95


RAT Generic Malware Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 15.2 42 ZeroCERT

15386 2021-11-14 18:47 file.exe  

8b9bce00bcd650b996c0d67d57675de7


Emotet Gen2 Formbook Generic Malware Malicious Library UPX PE File PE32 OS Processor Check MSOffice File JPEG Format VirusTotal Malware unpack itself Windows utilities suspicious process AppData folder WriteConsoleW anti-virtualization Ransomware Windows crashed 		5.6 15 ZeroCERT

15387 2021-11-14 18:47 joined.exe  

7ac20345ed8615a12a8ac4f1e79f2cb4


RAT PWS .NET framework Generic Malware Malicious Packer Malicious Library UPX PE File PE32 .NET EXE OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder installed browsers check Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 8.6 54 ZeroCERT

15388 2021-11-14 18:49 Goalscorer.exe  

e922d31d9e42823f27cb8512b3afe7ac


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		1 9.6 44 ZeroCERT

15389 2021-11-14 18:51 vbc.exe  

27d3f668c643e4fb0cb9d925ff18c1a4


Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7 16 3 1 13.0 M 42 ZeroCERT

15390 2021-11-14 18:51 240.exe  

bf34d3d86cc2a132f7779051b3cdbb78


Themida Packer UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.6 36 ZeroCERT

keyword