popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15466 2021-11-17 08:01 file_01.exe  

c7381f53aae8af38e0878fd55fd4233a


Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 10.6 38 ZeroCERT

15467 2021-11-17 08:02 doziezx.exe  

76155ad95f94ea29559fe97bc4c81e95


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 19 2 9.4 43 ZeroCERT

15468 2021-11-17 08:02 vbc.exe  

8be9e5d41b1921702f3e3cfe036b3321


Loki Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 1 10.4 M 25 ZeroCERT

15469 2021-11-17 08:03 JW0R24WXLkzpA2H.exe  

d58a1ea878651914926bc2a48c2b853d


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.2 39 ZeroCERT

15470 2021-11-17 08:05 luko5  

850964e5f638c8365f0f0a8bd18c95b6


Malicious Packer Malicious Library UPX PE64 PE File OS Processor Check DLL Checks debugger unpack itself Remote Code Execution crashed 		1.6 ZeroCERT

15471 2021-11-17 08:05 333.exe  

840a9628f0b877320c144b9968a036be


Emotet Malicious Library UPX Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM PE File PE32 OS Proc VirusTotal Malware Buffer PE AutoRuns PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows Remote Code Execution DNS 		6 12.4 37 ZeroCERT

15472 2021-11-17 08:07 .winlogon.exe  

bcef49bcee517cf2adc318beb174108c


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		14.2 17 ZeroCERT

15473 2021-11-17 08:08 aPIm2GsjA  

a0e796dcc0c4ac7bf48876ff02833456


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		20 5 5.2 12 ZeroCERT

15474 2021-11-17 08:09 vbc.exe  

c420e0d15b69b8ec5a0dc42cc213595f


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.0 23 ZeroCERT

15475 2021-11-17 08:09 a  

4e5a57bf7816af85829a14bae48168f8


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		20 5 5.4 27 ZeroCERT

15476 2021-11-17 08:09 VVYUYDUYFUFHHJFJ.dll  

60801952075f6e5a6db71c6ed9a9c0a3


RAT Generic Malware Malicious Packer PE File PE32 .NET DLL DLL VirusTotal Malware PDB 		1.2 31 ZeroCERT

15477 2021-11-17 08:11 ETS_0100000456_063256.exe  

a0b0b8907720674c5ee356cb6186a2a7


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 13.6 46 ZeroCERT

15478 2021-11-17 08:12 PP  

3496897bb3865e4a5b95ea6c1856183c


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		20 5 5.2 12 ZeroCERT

15479 2021-11-17 08:13 5MfZPgP06  

b59a88609656e2f8c798e6eb1012c747


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		20 5 5.4 23 ZeroCERT

15480 2021-11-17 08:14 vbc.exe  

2437829910089579a1af310d495b385b


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 13.8 34 ZeroCERT

keyword