popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15496 2021-11-17 13:38 11_16(2).pcapng  

a91dc162e1b3a5ce9d3ecbc949f5d104


AntiDebug AntiVM OS Processor Check Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

15497 2021-11-17 17:24 sample2-22c.exe  

f5dab510fcdeda1d81e0ece63e302e75


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware sandbox evasion Ransom Message ComputerName 		4.2 51 ZeroCERT

15498 2021-11-17 17:24 vbc.exe  

eb3c1a04e3ad5c57d32507e027432732


Loki Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 1 10.4 M 22 ZeroCERT

15499 2021-11-17 17:26 ea95zSw6dmdVE5Mh.exe  

458dfc1cf8a888378d0b129c117e2ea6


Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself ComputerName 		2.6 32 ZeroCERT

15500 2021-11-17 17:29 billion.exe  

0e6b2b68110c10ec992ae04dfb70d628


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key 		1 2 1 3.6 20 ZeroCERT

15501 2021-11-17 17:29 dllhost.exe  

be96aa77ab7f76401001197bdb7d3e50


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Code injection AntiDebug AntiVM PE File PE32 .NET EXE Dridex TrickBot VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Kovter Windows DNS Cryptographic key crashed 		1 4 2 11.8 14 ZeroCERT

15502 2021-11-17 17:29 vbc.exe  

7c875245a2618b56ad9f9ee5b11bc6c8


Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		14 28 1 5.8 25 ZeroCERT

15503 2021-11-17 17:31 2906_1637086033_3996.exe  

074c305083d2c589eea80e5abfe8bb6b


Lazarus Family Generic Malware Themida Packer Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Checks Bios Collect installed applications Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		2 8.8 29 ZeroCERT

15504 2021-11-17 17:33 .winlogon.exe  

47d08228361cddd38a4b1835a8bc6602


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		14.0 21 ZeroCERT

15505 2021-11-17 17:37 oVVrfAQR2OXSaEC.exe  

077ab459c72b81cb0a9180be9634d730


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 19 1 8.0 23 ZeroCERT

15506 2021-11-18 07:45 3459_1636981320_8453.exe  

81dedb5db683337a0adb0e0151f25f2c


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 50 ZeroCERT

15507 2021-11-18 07:46 F9le301G89W0s2g4jLO5  

0b4d015c501a2e0ae188e475a33fcbc1


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot Malware Report Checks debugger ICMP traffic unpack itself sandbox evasion Kovter ComputerName DNS 		20 6 5.4 ZeroCERT

15508 2021-11-18 07:48 sqlservr.exe  

67ef19646c0f8efc314968cdacb5aecc


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 14.6 38 ZeroCERT

15509 2021-11-18 07:49 D6  

885fb1b58445b2cb1b1a7ffed080d1bb


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		28 5 4.6 ZeroCERT

15510 2021-11-18 07:50 4949_1636976693_455.exe  

e42d69acb75be7780874c9ea58e4aa46


AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself Windows DNS Cryptographic key 		3 10.2 40 ZeroCERT

keyword