popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15541 2021-11-18 08:22 office.exe  

b99700a45b29cd93558629b868d1f0c1


Antivirus Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware AutoRuns Windows DNS 		1 4.8 57 ZeroCERT

15542 2021-11-18 08:24 2690_1636884579_4822.exe  

42bef8c160d0b00cb4c26f713b7e9d3f


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6.2 46 ZeroCERT

15543 2021-11-18 08:24 Systemltd.exe  

84ee3ad9ae07bf078a255ebf59a216a6


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		1 2 1 4.0 18 ZeroCERT

15544 2021-11-18 08:26 9370_1636985686_7616.exe  

0198c5a612317a06f11abbe95294408e


RAT Generic Malware PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		1 3 1 6.4 45 ZeroCERT

15545 2021-11-18 08:27 TSO_011020_10063863221.exe  

ee997c35fca1094cf6ca6ca00e410f78


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 14.6 32 ZeroCERT

15546 2021-11-18 08:29 6111_1636987952_2658.exe  

56324b7b63d05f41ce9b5b02a1a284f2


NPKI AntiDebug AntiVM PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.2 ZeroCERT

15547 2021-11-18 08:30 srfs.exe  

a32ab1ff2ec5f835b6456bb20a356e5e


Gen1 Generic Malware Themida Packer Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Malicious Traffic Check memory Creates executable files unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare VMware anti-virtualization installed browsers check Windows Browser Email ComputerName Firmware DNS crashed 		8 1 3 12.2 36 ZeroCERT

15548 2021-11-18 08:31 jay.jpg  

bd5c3ee098497398ee0f1a08b37923e1


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 4 1 8.4 50 ZeroCERT

15549 2021-11-18 08:31 .csrss.exe  

47bb87e13ffafcf6abbc5908a48c4d08


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 14.2 25 ZeroCERT

15550 2021-11-18 08:33 vbc.exe  

06451b346cd5a8c319f2ca34212ee91f


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.2 37 ZeroCERT

15551 2021-11-18 08:34 vbc.exe  

fae2478fe97d52d83a21c91e6148ed78


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		6 15 2 10.4 43 ZeroCERT

15552 2021-11-18 08:35 8102_1637053425_3753.exe  

58e37acf9f2ad681a0fdb5470315ed4f


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Collect installed applications powershell.exe wrote suspicious process WriteConsoleW installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 12.6 29 ZeroCERT

15553 2021-11-18 08:35 vbc.exe  

b8ecacd6489899bdfa00948c3992ea92


AgentTesla RAT PWS .NET framework browser info stealer Generic Malware Google Chrome User Data Antivirus Create Service Socket Code injection Sniff Audio KeyLogger Escalate priviledges Downloader AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process WriteConsoleW VMware anti-virtualization Windows ComputerName DNS Cryptographic key Software keylogger 		1 18.2 27 ZeroCERT

15554 2021-11-18 08:37 at.exe  

0dcbd79d3ef702f1a33ae9fef6fdef06


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows DNS 		1 9.6 41 ZeroCERT

15555 2021-11-18 08:41 vbc.exe  

cad43af39f983c31ad5579ea34a31457


Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		14 23 2 4 5.8 28 ZeroCERT

keyword