popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15451 2021-11-16 21:57 https://linksharing.samsungclo...  

2d0fe7f6fd0de180792f960e19f09c1e


Generic Malware Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		16 2 2 4.6 guest

15452 2021-11-17 06:29 packet1.pcapng  

aa4efea61e703e80ebfe0f03d51034db


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

15453 2021-11-17 07:46 obinnazx.exe  

a15f32098d89e911d22ea91bffb4dd7d


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows 		1 3 1 10.6 41 ZeroCERT

15454 2021-11-17 07:48 ETS_041002000456_067961.exe  

288f4c34cb160d5d19bf6253bb3edbd2


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 12.4 38 ZeroCERT

15455 2021-11-17 07:48 ETS_03102000456_0607301.exe  

5684f15da978ad73d44fe789eda5bd8f


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 12.6 40 ZeroCERT

15456 2021-11-17 07:50 vbc.exe  

906d95b6530a90ce328e418d2905d233


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.4 43 ZeroCERT

15457 2021-11-17 07:50 ETS_04100000456_0634741.exe  

fefe653b5da22eef8506d9c534b98085


RAT NPKI Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 12.8 36 ZeroCERT

15458 2021-11-17 07:52 vbc.exe  

f14fcc9ba3f2310617eb2791db59a702


PWS Loki[b] Loki.m Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.6 40 ZeroCERT

15459 2021-11-17 07:53 mode-cry.exe  

8cec5b455b359860f5a7aa647331783f


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		8 17 1 8.8 47 ZeroCERT

15460 2021-11-17 07:54 vbc.exe  

49ab86d22178e95f5b65b75a68f9a01d


Loki PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		2 3 6 1 14.2 40 ZeroCERT

15461 2021-11-17 07:56 urchzx.exe  

6bc174f341262c62fd0b4650f1f23b0d


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		10 22 3 9.6 25 ZeroCERT

15462 2021-11-17 07:56 vbc.exe  

db134497d2c27e8de932b80925a9684f


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.8 14 ZeroCERT

15463 2021-11-17 07:57 ScanPMT.exe  

ee65c71e0dc1cb592033a71dcdea0964


Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		3 8 1 6.8 48 ZeroCERT

15464 2021-11-17 07:58 erasizevar.png  

586c8bd1ff77c2b9ec844a9d35654228


Emotet Malicious Library UPX PE File PE32 Report suspicious privilege buffers extracted unpack itself Check virtual network interfaces suspicious process ComputerName Remote Code Execution DNS crashed 		6 2 6.2 ZeroCERT

15465 2021-11-17 07:59 vbc.exe  

0e2cb83d70db215f56ee6af75325c661


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW ComputerName DNS 		1 1 4.4 26 ZeroCERT

keyword