popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
22456 2022-12-09 09:57 niga.exe  

7989392a248d2eb2441c09b10fdea90d


Malicious Library UPX PE32 OS Processor Check PE File PDB unpack itself RCE 		1.2 M ZeroCERT

22457 2022-12-09 09:55 anon.exe  

27dd08d95b0ba699f7938eb299155460


RAT PWS .NET framework UPX PE32 OS Processor Check .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 6.2 M 43 ZeroCERT

22458 2022-12-09 09:55 vbc.exe  

3b33c707e522fc9e706c62687387ddbc


Malicious Library UPX PE32 PE File OS Processor Check FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		15 18 3 6.0 M 24 ZeroCERT

22459 2022-12-09 09:55 cred64.dll  

c0fd0167e213b6148333351bd16ed1fb


PWS Loki[b] Loki.m Malicious Library PE32 DLL PE File FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Checks debugger unpack itself Email DNS Software crashed 		1 1 1 6.0 M 54 ZeroCERT

22460 2022-12-09 09:54 sys_module.dll  

27dfc5e856a1de1beafddb8efb767016


Malicious Library UPX OS Processor Check DLL PE File PE64 Malware download Cobalt Strike Cobalt VirusTotal Malware Malicious Traffic Checks debugger unpack itself ComputerName DNS crashed 		1 2 1 3.8 M 14 ZeroCERT

22461 2022-12-09 09:53 GIBI.exe  

f4669b8159d06fd545b1bcf07507ff54


PWS[m] PWS .NET framework Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		10.8 M 27 ZeroCERT

22462 2022-12-09 09:52 k.exe  

04eda26f8ffd07ed4a77cb13bb413154


Malicious Library UPX DNS AntiDebug AntiVM PE32 OS Processor Check .NET EXE PE File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted WMI unpack itself ComputerName RCE crashed 		8.0 M 30 ZeroCERT

22463 2022-12-09 09:49 csrss.exe  

b6a13c1765a0ad179c9884b0fff6fd5a


Loki PWS[m] PWS Loki[b] Loki.m .NET framework Socket DNS AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 15.2 M 41 ZeroCERT

22464 2022-12-09 09:48 Broches.exe  

a6a69797f94297c043dc8930f7368271


Confuser .NET PE32 .NET EXE PE File VirusTotal Malware 		1.4 M 37 ZeroCERT

22465 2022-12-08 18:09 Shipment_notification166654743...  

5f76f0b41ac9b298d26f44826b1e4a0d


PWS[m] Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 12.6 41 ZeroCERT

22466 2022-12-08 18:03 build2.exe  

f56c8317f668ed043779b95bef8c849e


PWS Loki[b] Loki.m Malicious Library UPX AntiDebug AntiVM PE32 OS Processor Check PE File VirusTotal Malware PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself malicious URLs Tofsee ComputerName RCE DNS 		4 5 3 1 10.6 M 52 ZeroCERT

22467 2022-12-08 16:27 2.exe  

8f5b26c2678fb0f0e3f0e1775e231c57


RedLine stealer[m] Generic Malware Malicious Library UPX AntiDebug AntiVM PE32 OS Processor Check PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 10.2 20 ZeroCERT

22468 2022-12-08 16:27 pb1103.exe  

167a8e768f6b455d8d9a7c69412be3d9


Malicious Library VMProtect PE File PE64 VirusTotal Malware crashed 		2.0 26 ZeroCERT

22469 2022-12-08 16:24 pb1117.exe  

947920372b0491c5af2f2923665bc576


Malicious Library VMProtect PE File PE64 VirusTotal Malware crashed 		2.2 31 ZeroCERT

22470 2022-12-08 16:24 pb1105.exe  

ec7b5f5ae9b483d08fcbbe0d1f02752d


Malicious Library VMProtect PE File PE64 VirusTotal Malware crashed 		2.0 M 26 ZeroCERT

keyword