popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17056 2023-05-18 17:36 GGG%23%23%23%23%23%23%23%23%23...  

01c2fe220d602996255a3760b10a1219


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Exploit DNS crashed Downloader 		1 1 3 5.0 M 33 ZeroCERT

17057 2023-05-18 15:41 cryptoistic.bin  

d41d8cd98f00b204e9800998ecf8427e


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 guest

17058 2023-05-18 10:48 vbc.exe  

59f9df6fb26fb1a5c6343a443075649b


Formbook Malicious Library PE File PE32 FormBook Malware download Malware suspicious privilege Malicious Traffic unpack itself DNS 		34 19 4 18 2.4 M ZeroCERT

17059 2023-05-18 09:58 buggzx.exe  

d29862a821bc742d24c346287c79ca1a


Loki_b Loki_m PWS .NET framework Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 15.0 M 31 ZeroCERT

17060 2023-05-18 09:58 jjjj%23%23%23%23%23%23%23%23%2...  

f2af555f26393f34180a3845e92ba1cb


Formbook MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download Malware Malicious Traffic RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		22 20 13 2 4.0 M ZeroCERT

17061 2023-05-18 09:54 papilazx.exe  

589fc2b85730cb3a14c1ba64b8a4693d


PWS .NET framework Anti_VM .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself DNS 		1 3.2 M 40 ZeroCERT

17062 2023-05-18 09:53 135.exe  

c3359aec2c64c031a1e9f65c6520ed0f


UPX PE File PE32 Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Malicious Traffic Checks debugger buffers extracted unpack itself Collect installed applications sandbox evasion installed browsers check Ransomware Browser ComputerName Firmware DNS crashed 		1 1 1 9.4 M 20 ZeroCERT

17063 2023-05-18 09:50 ASSS%23%23%23%23%23%23%23%23%2...  

047fef24cc2235db39d3eb1551be28bf


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		12 12 12 5.4 M 30 ZeroCERT

17064 2023-05-18 09:48 llaa25.exe  

aec63ca0e90ee3b2f811656ae8747e9e


Gen2 Gen1 Generic Malware Malicious Packer PE64 PE File Browser Info Stealer VirusTotal Malware PDB MachineGuid buffers extracted unpack itself Check virtual network interfaces Tofsee Browser RCE crashed 		4 8 2 4.4 M 16 ZeroCERT

17065 2023-05-18 09:47 build.exe  

c82632236e77359b2aaa32e0cc38cd99


Loki_b Loki_m Gen1 Suspicious_Script_Bin Generic Malware UPX Malicious Library Malicious Packer DGA Socket DNS PWS[m] Http API Internet API ScreenShot Code injection AntiDebug AntiVM OS Processor Check PE File PE32 DLL Browser Info Stealer Malware download FTP Client Info Stealer Dridex VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Microsoft Telegram AutoRuns MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser Email ComputerName DNS Software 		8 11 12 4 18.8 M 22 ZeroCERT

17066 2023-05-18 09:45 vbc.exe  

2e84d5556bb37fcecb8cf7942a70606a


PWS .NET framework Generic Malware Antivirus PWS[m] Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		13 13 4 12.4 M 48 ZeroCERT

17067 2023-05-18 09:43 setupcode.exe  

28aa586922822ebcfd3254bb9bae053a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.6 M 29 ZeroCERT

17068 2023-05-18 09:41 buildnew.exe  

15e49c65d2ec8fa2294fa13b91550a0a


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself 		1.8 M 30 ZeroCERT

17069 2023-05-18 09:41 fred.exe  

49fb581e3d3ed6fbd834aff980244e36


PWS .NET framework Anti_VM .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 43 ZeroCERT

17070 2023-05-18 09:39 Financials-05-16-23-PDF.exe  

03c3f979feffbf02e7ab9a66f9a1f7b4


RAT .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW Tofsee ComputerName 		1 3 1 3.6 M 30 ZeroCERT

keyword