popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
30961 2022-05-20 10:53 vbc.exe  

e2af2968f48cda473f9d64b989c4e2da


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		7 16 2 5 7.0 M 36 ZeroCERT

30962 2022-05-20 10:52 .svchost.exe  

ac5b584f655fe8280f459f224cc7fdfb


RAT UPX Malicious Library PE32 PE File PNG Format .NET DLL DLL GIF Format PE64 VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself AppData folder DNS crashed 		1 3.8 36 ZeroCERT

30963 2022-05-20 10:50 .winlogon.exe  

28e77704f58f711c65d20a47464ba331


PWS[m] NPKI email stealer DNS Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 12.2 32 ZeroCERT

30964 2022-05-20 10:49 vbc.exe  

3369ce745b233c6036e13b9b9cea8478


Loki UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 8 1 10.0 M 43 ZeroCERT

30965 2022-05-20 10:47 vbc.exe  

aa6422a82c0bf522ed68ecbedf0755c4


Loki UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 8 1 9.8 M 34 ZeroCERT

30966 2022-05-20 10:47 HOU.exe  

eee453d683008409740a96e247fc9f2b


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself RCE 		2.4 40 ZeroCERT

30967 2022-05-20 10:46 vbc.exe  

44a6829e3ee6c5d98fccde99b502f7e2


Formbook RAT UPX AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD Windows DNS Cryptographic key 		15 26 6 9.4 25 ZeroCERT

30968 2022-05-20 10:45 vbc.exe  

aa223c48d72371b24baf306eb49e7597


PWS[m] RAT PWS .NET framework SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		10.0 20 ZeroCERT

30969 2022-05-20 10:45 vbc.exe  

996e533fafb2e76b54ecf127d6430795


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE 		2.6 50 ZeroCERT

30970 2022-05-20 10:43 vbc.exe  

fefc83495ed902d83c464f33c73be672


Loki UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 2 10 1 9.6 M 44 ZeroCERT

30971 2022-05-20 10:41 vbc.exe  

7b7351bdf7eec81ce0dcb0c1cdd097b8


UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 2 9 9.6 47 ZeroCERT

30972 2022-05-20 10:40 rtst1043.exe  

674a91f35a3c54032850a0b7f45f81b3


Malicious Library VMProtect PE File PE64 VirusTotal Malware crashed 		2.2 33 ZeroCERT

30973 2022-05-20 10:40 vbc.exe  

0d5c12ef90391b5bfc0dedeca59476b6


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself 		10 17 1 9 8.0 M 47 ZeroCERT

30974 2022-05-20 10:38 vbc.exe  

80dc3b7b8970ec34552a23d09447a4d3


RAT PWS .NET framework PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.2 34 ZeroCERT

30975 2022-05-20 10:37 winlog.exe  

7ab3a54474c378d567a5f0cbd3ac1b52


PWS[m] PWS Loki[b] Loki.m RAT DNS AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 9 13.0 22 ZeroCERT

keyword