popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15391 2021-11-14 18:53 3709_1636788860_785.exe  

e2b1b315921b100a562396ad39aa4537


Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM PE File PE32 Browser Info Stealer Malware download NetWireRC VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Checks Bios Detects VirtualBox Detects VMWare Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check DCRat Windows Browser ComputerName DNS crashed 		7 1 2 17.4 26 ZeroCERT

15392 2021-11-14 18:53 Trumpeters.exe  

16682361862d0d1d86d8021286fee3fd


RAT BitCoin Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 9.4 34 ZeroCERT

15393 2021-11-14 18:56 build.exe  

7819fce8aca798a7b78bd00d28399b64


AntiDebug AntiVM PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 15.0 24 ZeroCERT

15394 2021-11-14 18:58 etl_00382_0541_0165410000.exe  

abbd913fabcce80fe6c14f8103800378


RAT Generic Malware Malicious Library AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.6 42 ZeroCERT

15395 2021-11-14 18:59 asdfg.exe  

6966182dd20351152ea815d31e735067


PWS Loki[b] Loki.m RAT Gen1 Gen2 [m] Generic Malware Generic Malware task schedule UPX Malicious Packer Malicious Library Socket DNS Internet API HTTP KeyLogger ScreenShot Http API Steal credential AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Browser Info Stealer Malware download FTP Client Info Stealer Vidar Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Ransomware Zeus OskiStealer Stealer Windows Chrome Browser Email ComputerName DNS Cryptographic key Software crashed Downloader Password 		15 13 11 2 27.8 27 ZeroCERT

15396 2021-11-15 09:52 asdfg.exe  

6966182dd20351152ea815d31e735067


PWS Loki[b] Loki.m RAT Gen1 Generic Malware UPX Malicious Library Malicious Packer Socket DNS Internet API HTTP KeyLogger ScreenShot Http API Steal credential AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check DLL JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Tofsee OskiStealer Stealer Windows Chrome Browser Email ComputerName DNS Cryptographic key crashed Password 		12 10 8 2 22.4 27 guest

15397 2021-11-15 14:30 2267_1636828447_4225.exe  

0f9d1f2e3aaad601bb95a039b0aedcfb


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 42 ZeroCERT

15398 2021-11-15 14:30 Goels.exe  

31071ff37a004d1409f24abc64d14ac1


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Cryptographic key Software crashed 		1 4 1 12.0 33 ZeroCERT

15399 2021-11-15 14:32 stenc.exe  

0eed73c62d0e4786e27e66a1cbedc15a


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware unpack itself crashed 		1.4 20 ZeroCERT

15400 2021-11-15 14:32 666777666.exe  

60772ab816ff660abbe13f426a57005d


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE PNG Format MSOffice File JPEG Format Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Cryptographic key Software crashed 		3 3 8.4 40 ZeroCERT

15401 2021-11-15 14:34 hubris.exe  

9b58b4fa3bec6452d6ff2902342705e0


Emotet Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware unpack itself 		2.4 26 ZeroCERT

15402 2021-11-15 14:34 f1_f.exe  

2b981c5d303d855ff0b7784ea7082860


Generic Malware Themida Packer Anti_VM UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 3 1 10.4 26 ZeroCERT

15403 2021-11-15 14:36 664_1636917001_7631.exe  

0db3251c697b3c254c36b60edcf4a63f


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		1 2 1 3.6 25 ZeroCERT

15404 2021-11-15 14:36 Faints.exe  

5e34695c9f46f1e69ce731d3b7359c88


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		1 3 1 11.4 38 ZeroCERT

15405 2021-11-15 14:38 almost.exe  

a9a18e24fe81eaadcfaf2fde2b6d40ca


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW ComputerName DNS DDNS 		1 1 3.4 23 ZeroCERT

keyword