popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
30751 2022-05-25 09:53 vbc.exe  

44e906d3886422559ed74202f5f91314


RAT PWS .NET framework PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName RCE crashed 		2.6 M 10 ZeroCERT

30752 2022-05-25 09:53 1.exe  

df7bcc6a339e5d1d61f040c538669b2b


Themida Packer Malicious Packer Malicious Library PE32 PE File Check memory unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Windows Firmware crashed 		4.4 M ZeroCERT

30753 2022-05-25 09:51 jb7urLT2s  

a8e53abcb6cd89d8730ea89072711152


Malicious Packer Malicious Library DLL PE File PE64 Dridex TrickBot VirusTotal Malware Report AutoRuns Checks debugger ICMP traffic unpack itself Auto service suspicious process AntiVM_Disk VM Disk Size Check Kovter Windows ComputerName RCE DNS 		15 3 8.0 11 ZeroCERT

30754 2022-05-25 09:50 ik8EFuXqc  

9347e031acdbf6cda0c961fa968e0bb5


Malicious Packer Malicious Library DLL PE File PE64 Dridex TrickBot Malware Report AutoRuns Checks debugger ICMP traffic unpack itself Auto service suspicious process human activity check Kovter Windows ComputerName RCE DNS 		16 3 7.4 M ZeroCERT

30755 2022-05-25 09:50 sleep.exe  

e7141cadb71a36b0dcddb0ef7a67caec


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		4 9 2 5.6 M 36 ZeroCERT

30756 2022-05-25 09:48 2.exe  

046804d6a8900b2fff9596823db0ce93


Themida Packer Malicious Packer PE32 PE File unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Windows Firmware crashed 		4.2 ZeroCERT

30757 2022-05-25 09:46 ideainv.sfx.exe  

fa47b24566cb07aa26b215f121cb8758


Emotet VBA_macro UPX Malicious Library Anti_VM Admin Tool (Sysinternals etc ...) PE32 PE File MSOffice File VirusTotal Malware PDB Check memory Creates executable files RWX flags setting unpack itself AppData folder DNS 		1 3.6 M 16 ZeroCERT

30758 2022-05-25 09:46 abl.exe  

f46edbe315ff60d02ce7c243edda1072


UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName Software 		1 2 8 9.8 M 39 ZeroCERT

30759 2022-05-25 09:45 vbc.exe  

4a29481bcff7afa8eba55c66ea729833


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		8 15 3 4 5.8 M 27 ZeroCERT

30760 2022-05-25 09:44 .winlogon.exe  

4a6ca68276fb5529ff073c3b8bbcf380


PWS[m] NPKI email stealer Socket DNS Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 11.2 M 23 ZeroCERT

30761 2022-05-25 09:44 .svchost.exe  

f8f22c4c4b54bb78aa18c80bf25f6cdc


RAT UPX Malicious Library PE32 PE File PNG Format DLL JPEG Format PE64 GIF Format VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself AppData folder 		3.8 M 31 ZeroCERT

30762 2022-05-25 09:41 haitianzx.exe  

fae9f5c20ea03843c1df7f5812ba9b0a


PWS[m] SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.0 M 21 ZeroCERT

30763 2022-05-25 09:39 data64_6.exe  

09e435274ff2f3f7fd404c81855700c4


UPX Malicious Library AntiDebug AntiVM PE32 OS Processor Check PE File DLL VirusTotal Malware PDB Code Injection Checks debugger unpack itself AppData folder RCE 		3.6 M 34 ZeroCERT

30764 2022-05-25 09:37 toolspab2.exe  

4675c3011c2da9ee9e9aa64f98754660


Malicious Library AntiDebug AntiVM PE32 PE File Malware PDB Code Injection Checks debugger buffers extracted unpack itself RCE 		6.4 M ZeroCERT

30765 2022-05-25 09:36 in.exe  

4fa69e0d7185f0e227c7ac6223afa015


PWS[m] RAT Hide_EXE SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		1 4 6 12.8 M 48 ZeroCERT

keyword