popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15556 2021-11-18 08:42 emezx.exe  

476f7ccfae367d3a1379c260ca28b8d5


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 1 8.4 40 ZeroCERT

15557 2021-11-18 08:43 XUBS  

86a05c561153b2d3c796ce5162523c40


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		28 5 5.6 36 ZeroCERT

15558 2021-11-18 10:04 y76gkOkGrbYHjh.dll  

722f898d814e4d04ed7c41bde6760eff


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Checks debugger unpack itself sandbox evasion ComputerName 		2.0 블루

15559 2021-11-18 10:25 f59ovCcsI09zqD8KZ0o.dll  

bd63c91ebde9fde16b3ce1b890074baa


PE File PE32 DLL VirusTotal Malware 		1.0 15 Kim.GS

15560 2021-11-18 10:27 f59ovCcsI09zqD8KZ0o.dll  

bd63c91ebde9fde16b3ce1b890074baa


PE File PE32 DLL VirusTotal Malware 		1.0 15 Kim.GS

15561 2021-11-18 10:29 f59ovCcsI09zqD8KZ0o.dll  

bd63c91ebde9fde16b3ce1b890074baa


PE File PE32 DLL VirusTotal Malware 		1.0 15 Kim.GS

15562 2021-11-18 10:43 y76gkOkGrbYHjh.dll  

722f898d814e4d04ed7c41bde6760eff


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot Malware Report Checks debugger ICMP traffic unpack itself sandbox evasion Kovter ComputerName DNS 		20 6 5.4 블루

15563 2021-11-18 12:55 octafx4setup.exe  

568e1204996456984c05f12de9201168


Gen2 Formbook Generic Malware UPX Malicious Library PE File PE32 OS Processor Check VirusTotal Malware Check memory buffers extracted WMI unpack itself Check virtual network interfaces AppData folder AntiVM_Disk anti-virtualization VM Disk Size Check Tofsee ComputerName Remote Code Execution DNS 		1 23 1 10.6 1 C0d3_22

15564 2021-11-18 13:01 t-rex.exe  

d8a71db524074bb8b29928c141a570f9


Malicious Library PE64 PE File VirusTotal Malware 		1.8 44 C0d3_22

15565 2021-11-18 13:10 7wmp0b4s.rsc  

b258374a8e32542b9eba337a3f82f5b1


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.8 2 C0d3_22

15566 2021-11-18 13:16 http://chek.zennolab.com/proxy...  

b6dc5502b3a9e484f096210896f467f5


Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 2 4.6 C0d3_22

15567 2021-11-18 13:34 PCHealthCheck.exe  

c5a267398167c6a47f81a89056761528


Gen2 Generic Malware Malicious Packer Admin Tool (Sysinternals etc ...) Malicious Library UPX PE64 PE File OS Processor Check PDB Remote Code Execution 		0.4 C0d3_22

15568 2021-11-18 13:47 balzak.html  

c8975f3bb4a94c035e7b3a4594c8dab0


Generic Malware UPX Antivirus AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		2 2 3 11.8 3 ZeroCERT

15569 2021-11-18 13:49 4637_1637095941_5016.exe  

8c96471e0c39a68c73fcd9cf571b9cdc


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 43 ZeroCERT

15570 2021-11-18 13:50 invoice_0003900000.wbk  

cfeee36c618563537127b7c9c2787c45


Loki RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		3 3 13 1 4.4 27 ZeroCERT

keyword