popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
22426 2022-12-10 14:53 csrss.exe  

0a3a7cba003467f2d1976ba842d155dc


Malicious Library UPX PE32 PE File OS Processor Check FormBook Browser Info Stealer Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder Browser 		17 26 2 11 5.0 M 28 ZeroCERT

22427 2022-12-10 14:52 mine.exe  

0e068405ce30f54e043ab2c3841efe78


RAT PWS .NET framework UPX PE32 OS Processor Check .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 6.2 M 46 ZeroCERT

22428 2022-12-10 14:52 gooozzzz.exe  

552e854a6f2c4c3dd05e69be6310d550


Ave Maria WARZONE RAT Generic Malware Malicious Library Downloader Malicious Packer UPX PE32 OS Processor Check PE File VirusTotal Malware Check memory unpack itself human activity check RCE 		2 1 5.0 M 59 ZeroCERT

22429 2022-12-10 14:51 macnocv2.1.exe  

6bd52c8274a35c39740da9b52b4c7ef0


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself DNS 		2 9 1 6.2 M 28 ZeroCERT

22430 2022-12-10 14:50 olx.rar  

c76ffa6785ba2e17c76d5e61f6305150


RAT UPX PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.2 M 43 ZeroCERT

22431 2022-12-10 14:49 nppshell.exe  

45a95da55d4eb1e4d7f8d08f52e1f0ee


Generic Malware UPX Antivirus Malicious Library Malicious Packer PE32 OS Processor Check PE File PE64 DLL JPEG Format BMP Format Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows Email ComputerName DNS Cryptographic key Software crashed 		10 5 6 2 14.2 M 11 ZeroCERT

22432 2022-12-10 14:49 vhad.exe  

ec8e41469c87d52dc8238ba282f613b6


AgentTesla PWS[m] browser info stealer Generic Malware Google Chrome User Data Downloader Malicious Library Malicious Packer UPX Create Service Socket DNS Internet API Sniff Audio KeyLogger Escalate priviledges AntiDebug AntiVM PE32 OS Processor Check PE Remcos VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory buffers extracted Creates executable files suspicious process AppData folder Windows DNS DDNS keylogger 		1 7 2 14.0 M 51 ZeroCERT

22433 2022-12-10 14:46 exe.exe  

cece3f2c4e2be634eb2cbca97010740e


Malicious Library VMProtect PE32 PE File VirusTotal Malware Buffer PE PDB Checks debugger buffers extracted unpack itself sandbox evasion ComputerName 		1 4.4 M 13 ZeroCERT

22434 2022-12-10 10:54 NABUInternetAdapter_12.7.exe  

3466e379ac0608ccb944667185b84cfe


RAT PWS .NET framework Generic Malware PE32 .NET EXE PE File VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows 		2 2 4.0 1 guest

22435 2022-12-09 15:17 dkWKxiFhDGVr.exe  

f36038207a570f622e9114bce1f6b1ed


Malicious Library PE32 PE File VirusTotal Malware Buffer PE PDB Checks debugger buffers extracted unpack itself sandbox evasion ComputerName 		1 3.8 M 30 ZeroCERT

22436 2022-12-09 15:15 vbc.exe  

7e26a65502e428460a76d8268a420ade


RAT PE32 .NET EXE PE File VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces ComputerName 		1 2 3.6 M 30 ZeroCERT

22437 2022-12-09 15:13 vbc.exe  

1e063b3d9cc7a483c1b7cce5585f29f6


RAT PE32 .NET EXE PE File VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces ComputerName 		1 2 3.6 M 36 ZeroCERT

22438 2022-12-09 15:12 502.exe  

842d42bb052a77759c8f55d46021b2e0


Malicious Library UPX PE32 OS Processor Check PE File VirusTotal Malware Creates executable files Ransom Message 		2.8 M 55 ZeroCERT

22439 2022-12-09 15:11 vbc.exe  

f9cab82b8a981cd57613abc014237491


PWS[m] PWS Loki[b] Loki.m RAT Generic Malware Antivirus DNS AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		2 4 1 17.2 29 ZeroCERT

22440 2022-12-09 15:11 vbc.exe  

9a71a69f66b67df8a4d5a849b3832986


RAT Generic Malware Antivirus AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName Cryptographic key 		1 2 11.8 40 ZeroCERT

keyword