popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
18136 2023-04-27 09:59 calcinstall.exe  

881bef8377f48946c3863d06b3de735a


RAT Gen1 Gen2 Schwerer Generic Malware UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM Obsidium protector .NET EXE PE32 PE File DLL OS Processor Check GIF Format MZP Format PE64 HWP MSOffice File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk suspicious TLD sandbox evasion WriteConsoleW VM Disk Size Check human activity check Tofsee Ransomware Windows ComputerName crashed 		1 6 1 13.0 M 34 ZeroCERT

18137 2023-04-27 09:58 vbc.exe  

7ee7421fc12096ec24a2cb1706c5c734


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself RCE 		2.4 M 51 ZeroCERT

18138 2023-04-27 09:53 vbc.exe  

773da960aeb7c6260cfe6328aafd922f


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself RCE 		2.4 M 49 ZeroCERT

18139 2023-04-27 09:51 vbc.exe  

a1ef3aeba94469b98befd1a6ba1a8b47


RAT UPX Malicious Library OS Processor Check PE64 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 42 ZeroCERT

18140 2023-04-27 09:49 vbc.exe  

50a75fb5b12450844ace5ef53a050ead


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself RCE 		2.4 M 41 ZeroCERT

18141 2023-04-27 09:47 originalbuild.exe  

6bdbea0ec35358cc728f0213603bc9f5


RAT Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 6.0 M 38 ZeroCERT

18142 2023-04-27 07:47 name.hta  

1e34ba7ca79958f904b2fcaebe9532e2


RAT Generic Malware task schedule Anti_VM Antivirus ScreenShot AntiDebug AntiVM PowerShell .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer NetWireRC Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut Creates executable files unpack itself Checks Bios Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check Tofsee DCRat Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		15 4 7 22.0 M ZeroCERT

18143 2023-04-27 03:18 0A7FCD23-2B52-47F2-9A10-79A2B7...  

4e55bf3f7eb04fb987a1bfa08f768675


JPEG Format 		BRY

18144 2023-04-27 02:26 DS_Store-5  

93103d36de62ffb10919f3e7fc51783a


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself installed browsers check Browser Email 		3.2 BRY

18145 2023-04-27 02:17 DS_Store  

e84de8d6be88362a63d11938960b1fbd


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself installed browsers check Browser Email 		3.2 BRY

18146 2023-04-26 18:26 reverse.exe  

d32a31a376731f31251a2d17ea3828bf


Meterpreter PE64 PE File VirusTotal Malware DNS crashed 		1 3.2 M 47 r0d

18147 2023-04-26 18:21 %23%23%23%23%23%23%23%23%23%23...  

8c04ebf8df5396b9d4cd12056d0a42fe


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		4 6 8 5.0 M 35 ZeroCERT

18148 2023-04-26 18:19 debug.dbg  

070b332f2ba3f1248c43931c8e9b54c2


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.4 M 39 ZeroCERT

18149 2023-04-26 18:16 services.exe  

169457576b3c270c112f87cdfefdb688


NPKI RAT PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 25 ZeroCERT

18150 2023-04-26 18:15 vbc.exe  

fe889bf209a5e139d07c128c6d0ba877


Formbook PWS .NET framework RAT AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces Windows ComputerName DNS Cryptographic key crashed 		4 8 1 11.6 M 44 ZeroCERT

keyword