popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17551 2023-05-30 17:14 ready.exe  

68a12439e64b2e4fd0733e2600153045


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware unpack itself DNS 		1 2.6 M 34 ZeroCERT

17552 2023-05-30 17:13 sQdXMQIHJl75b1w.exe  

e7f043a52ed8bbd9dd37bec764801f7e


Suspicious_Script_Bin task schedule Admin Tool (Sysinternals etc ...) ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 Malware download NetWireRC VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check DCRat Windows ComputerName crashed 		4 2 1 4 11.8 M 30 ZeroCERT

17553 2023-05-30 17:12 INET.exe  

7f9f5628b1698378cecaff303fb4cf2d


PWS .NET framework Formbook SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Browser Email ComputerName Cryptographic key Software crashed 		12.4 M 37 ZeroCERT

17554 2023-05-30 17:11 index.ps1  

d41d8cd98f00b204e9800998ecf8427e


Generic Malware Antivirus unpack itself 		0.4 ZeroCERT

17555 2023-05-30 16:38 QT367001.exe  

c72b6d0fa5da7249b6ddffe1b3d83363


Loki Loki_b Loki_m PWS .NET framework Formbook Hide_EXE Socket DNS PWS[m] Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 4 1 15.2 54 ZeroCERT

17556 2023-05-30 16:36 Signed Proposal pdf.exe  

6cac87c1e2aa3e15837dcfff9d23cf0c


Loki NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 6 1 9.2 51 ZeroCERT

17557 2023-05-30 16:33 RV1-INV-2023090.exe  

e7eca1999e37695727ae022c0bc65d18


Loki NSIS UPX Malicious Library PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 6 1 9.6 53 ZeroCERT

17558 2023-05-30 16:30 DHL Receipt_AWB_20458290822.ex...  

e0bce4c29887875b2089b16fb21d4fad


Loki_b Loki_m PWS .NET framework Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 13.2 51 ZeroCERT

17559 2023-05-30 16:28 Shipping documents against Com...  

ffe9559fdba21527911e2c7a9536fc7e


Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Software 		1 15.2 55 ZeroCERT

17560 2023-05-30 16:27 Request PDA_MT Tanker 1.exe  

a1d3e7d0ecb80b47259ac1222c821090


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 14.0 M 47 ZeroCERT

17561 2023-05-30 16:25 Kimball Electronics PO NO45032...  

4d05c10b6ba4bf4e4db1c49232f2e144


Loki Loki_b Loki_m PWS .NET framework RAT Generic Malware Antivirus Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c powershell PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 1 7 1 16.8 45 ZeroCERT

17562 2023-05-30 16:21 MATERIAL AVT MEPZ FSL2022.ex...  

81dfce6bac91a9a7bd90613995595aa3


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 6 1 13.4 49 ZeroCERT

17563 2023-05-30 16:16 IMG-506402301.exe  

acd18f56751acb94768ff35aca47b1e1


Loki_b Loki_m PWS .NET framework UPX Socket DNS PWS[m] AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 14.8 51 ZeroCERT

17564 2023-05-30 16:13 270EA03E47CD4B98478524B51302E1...  

270ea03e47cd4b98478524b51302e134


Loki Loki_b Loki_m Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		2 1 5 1 7.6 63 guest

17565 2023-05-30 15:15 kds7uq5kknv.exe  

433dbed8a7afbf15bfee967c63a50769


UPX Malicious Library OS Processor Check PE File PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself Collect installed applications WriteConsoleW installed browsers check Ransomware Lumma Stealer Browser ComputerName Firmware DNS crashed 		1 1 2 1 12.6 M 50 ZeroCERT

keyword