popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
30841 2022-05-23 09:32 E3946207595.xls  

6fa95c9fc12894519b4332e029f564db


MS_Excel_Hidden_Macro_Sheet MSOffice File VirusTotal Malware Creates executable files RWX flags setting exploit crash unpack itself suspicious process Tofsee Exploit crashed 		3 4 2 4.4 33 guest

30842 2022-05-23 08:23 54.exe  

46941fd0c90a281ad25d2d68737bcf8d


UPX PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Check memory Checks debugger RWX flags setting unpack itself Windows ComputerName RCE DNS Cryptographic key crashed 		1 6.2 M 37 ZeroCERT

30843 2022-05-23 08:22 vbc.exe  

61be5168cca3b1d728229f863b9f1162


UPX Malicious Library PE32 OS Processor Check PE File FormBook Malware download VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself ComputerName 		6 15 2 8.0 M 43 ZeroCERT

30844 2022-05-23 08:18 tel.exe  

99629a1f5888cf9ef2ddd7262d0af5d9


HermeticWiper UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE 		2.4 M 41 ZeroCERT

30845 2022-05-23 08:17 vbc.exe  

f6f4429e20b9926d303588a31653453a


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself 		22 22 2 17 8.0 M 41 ZeroCERT

30846 2022-05-23 08:17 vbc.exe  

fe367da5cd1fe1f4c49b36ca398aca5d


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		4 8 1 5.6 M 30 ZeroCERT

30847 2022-05-23 08:17 checkit2.exe  

3af63779be731281cdd869c329832c1a


RAT PE File PE64 VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 1 1 9.4 M 24 ZeroCERT

30848 2022-05-23 08:16 zmb.exe  

61d8380734dab62afb07e2d12cb746af


RAT AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself WriteConsoleW DNS 		2 7 5 4.0 M 43 ZeroCERT

30849 2022-05-23 08:14 top.exe  

41dda984ef09014f53cf0e12688c0cd7


HermeticWiper UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE 		2.4 M 46 ZeroCERT

30850 2022-05-23 08:06 tv.exe  

f1784327c0fa0c2928d0415d25b0c5f6


RAT PWS .NET framework UPX AntiDebug AntiVM PE32 OS Processor Check .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		3 7 2 9.0 M 36 ZeroCERT

30851 2022-05-23 08:04 .winlogon.exe  

fc68fa337796688c1c367cf952036c41


PWS[m] PWS .NET framework NPKI email stealer DNS Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 11.2 M 23 ZeroCERT

30852 2022-05-23 08:02 vbc.exe  

8e910b0244ba51690798bfc4e7ecc994


AgentTesla PWS[m] RAT PWS .NET framework browser info stealer Generic Malware Google Chrome User Data UPX Antivirus Create Service Socket DNS Internet API Code injection Sniff Audio KeyLogger Downloader Escalate priviledges AntiDebug AntiVM PE32 OS Proces VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS keylogger 		2 1 13.4 M 40 ZeroCERT

30853 2022-05-23 08:01 clip.jpg  

bc03255296791979fde6a769d753a3b8


UPX Malicious Library AntiDebug AntiVM PE32 OS Processor Check PE File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself 		5.8 M 41 ZeroCERT

30854 2022-05-23 07:59 55.exe  

07c8ceffcfe28cc6c365d88434861190


RAT Generic Malware UPX PE32 OS Processor Check .NET EXE PE File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows RCE DNS Cryptographic key 		1 5.4 M 39 ZeroCERT

30855 2022-05-23 07:59 vbc.exe  

ec65b02b5000460be82c3723fdcfe228


RAT NPKI PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName crashed 		2.4 M 37 ZeroCERT

keyword