popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15601 2021-11-18 14:37 obizx.exe  

dafce59283b215958f71191b6ec0fc7c


PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 3 1 9.0 23 ZeroCERT

15602 2021-11-18 14:39 Done.exe  

aaea0b2a1b429283fe48d824d1c40c4b


Themida Packer Generic Malware Malicious Library UPX Anti_VM Antivirus Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM PE Fi Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare powershell.exe wrote suspicious process AppData folder VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		3 12.6 32 ZeroCERT

15603 2021-11-18 14:40 E5WhBhUP2dqn  

356252e7a07ec1a807795cfb77629ea7


VBA_macro Generic Malware Antivirus Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM Word 2007 file format(docx) VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates shortcut RWX flags setting unpack itself suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		8.4 20 ZeroCERT

15604 2021-11-18 14:41 file2.cms  

7a8ff582c7e91af4c10019b82ada67b4


PE64 PE File DLL VirusTotal Malware unpack itself WriteConsoleW 		1.6 3 ZeroCERT

15605 2021-11-18 14:42 blk00000.dat  

3d4656931a8b1ba6b4b6669ea03b8c03


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 C0d3_22

15606 2021-11-18 14:42 scrss.exe  

3ba80656013e9128336702a6c4eded0c


PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 4 1 8.0 25 ZeroCERT

15607 2021-11-18 14:44 7021_1637144508_486.exe  

0437147f23b1eb71d19d7f647f337d08


RAT Generic Malware Malicious Packer Antivirus UPX PE File PE32 .NET EXE VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName crashed 		3.0 26 ZeroCERT

15608 2021-11-18 14:44 qyQLbNsDZFL  

93288048b2d674437e5d8adcf13d1169


VBA_macro Generic Malware Antivirus Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM Word 2007 file format(docx) Vulnerability VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		8.0 18 ZeroCERT

15609 2021-11-18 14:48 5401_1636996595_7877.exe  

1d068763bcac85e83bfdad08e0e1d0b6


Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName Cryptographic key Software crashed Downloader 		4 12 1 10.0 35 ZeroCERT

15610 2021-11-18 14:49 tgzx.exe  

e0c09b7302a96d737a7573a7938ea389


Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder suspicious TLD DNS 		10 24 4 6.0 13 ZeroCERT

15611 2021-11-18 14:49 jpg01.jpg  

05b1c8f10da93f118ced2fe384929937


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process WriteConsoleW VMware anti-virtualization Windows ComputerName Cryptographic key Software 		2 4 1 13.2 26 ZeroCERT

15612 2021-11-18 14:50 rc.exe  

784fbedb911e18a12a0178e77448278e


Malicious Library UPX Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName Remote Code Execution crashed 		1 7 1 14.0 38 ZeroCERT

15613 2021-11-18 14:50 quodqbqhlcvhzw.mp4  

b4c5c1e150afcd7386e83ef0da203f3b


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.2 17 ZeroCERT

15614 2021-11-18 14:50 e4laFBDXIvYT6O  

438934affa344ce17441d2c6ec40a3de


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		28 5 5.6 33 ZeroCERT

15615 2021-11-18 14:50 scrss.exe  

632300e7486ea3fb4085ebd8df35b0d4


PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		1 3 1 9.6 32 ZeroCERT

keyword