popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
17956 2023-05-09 13:22 aslmanager.20230509T000519-04  

3bd376dae4abaf351e98ac49c96d4ee8


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 BRY

17957 2023-05-09 13:14 F211CDAB-CD00-415A-99E2-27DF41...  

48b29d559c76e8d14e5e6434d84405ab


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 BRY

17958 2023-05-09 13:07 main.c47195de.css  

0adbf0b1d5e2bd19d4e94242e0840430


ScreenShot AntiDebug AntiVM Check memory unpack itself 		1.0 BRY

17959 2023-05-09 12:57 override-mac_f76168c82308f7c98...  

af97a2869dbd1103f4fcdbe3c8c53568


ScreenShot AntiDebug AntiVM Check memory unpack itself 		1.0 BRY

17960 2023-05-09 11:01 vbc.exe  

34fbc7022384a5377bd9b728f7e35ee8


Generic Malware UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself 		2.2 M 49 r0d

17961 2023-05-09 09:21 vbc.exe  

743a03da4bca80da5f49be2b77050225


Formbook NSIS UPX Malicious Library PE32 PE File DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		21 24 2 19 5.0 M 41 ZeroCERT

17962 2023-05-09 09:11 fotocr23.exe  

9a5f630ba99d3ee7e838d5c9abac233e


Gen1 Emotet PWS .NET framework RAT UltraVNC UPX Malicious Library Malicious Packer Confuser .NET CAB PE32 PE File OS Processor Check .NET EXE AutoRuns PDB suspicious privilege Check memory Checks debugger Creates executable files unpack itself Disables Windows Security AppData folder AntiVM_Disk VM Disk Size Check Windows Update RCE DNS Cryptographic key crashed 		2 7.0 M ZeroCERT

17963 2023-05-09 09:11 123.exe  

2aeac863392c9a2a31058c6d5eeb4cc2


PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download VirusTotal Malware RecordBreaker PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications installed browsers check Stealer Windows Browser DNS 		9 1 5 11.4 M 28 ZeroCERT

17964 2023-05-09 09:11 foto0174.exe  

1b1b1239c10dcd01f551df6cee30d4e2


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE32 PE File OS Processor Check DLL Browser Info Stealer Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Update Browser ComputerName RCE DNS Cryptographic key Software crashed 		4 2 6 3 16.0 M ZeroCERT

17965 2023-05-09 09:09 vbc.exe  

34fbc7022384a5377bd9b728f7e35ee8


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself 		2.2 M 47 ZeroCERT

17966 2023-05-09 09:09 vbc.exe  

e47e3bd985effc1d1352ac832a09da14


Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 7 14.4 M 41 ZeroCERT

17967 2023-05-09 09:05 009.jpg  

baa51dc77e43c436c429a9131ce4b152


Malicious Library PE32 PE File VirusTotal Malware Check memory unpack itself suspicious TLD WriteConsoleW Interception RCE 		1 3.4 59 ZeroCERT

17968 2023-05-09 09:04 zqqK.html  

5144480c0b8e79a016fafcfc3d3c3aa7

unpack itself crashed 		0.6 M ZeroCERT

17969 2023-05-09 09:03 instal6699_cr.exe  

eafe753a6fd3d7e298974135a34d565c


RedLine stealer[m] UPX Admin Tool (Sysinternals etc ...) PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 10.2 15 ZeroCERT

17970 2023-05-09 09:03 obi.exe  

f8001587bbb6e217b0f812e0e6e797d3


.NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 46 ZeroCERT

keyword