popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
30991 2022-05-19 11:40 vbc.exe  

4c64cf8753a33ad06b5ffa18baaf4f7e


Loki PWS[m] PWS Loki[b] Loki.m .NET framework DNS AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 7 1 13.6 M 37 ZeroCERT

30992 2022-05-19 11:38 vbc.exe  

68fcd1ebd9de5ff4645e62008dd04ece


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE DNS 		2 3.0 34 ZeroCERT

30993 2022-05-19 11:34 kellyzx.exe  

ccfb1788d4a0c8d790b8453c95b936a6


PWS[m] PWS Loki[b] Loki.m .NET framework DNS AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 7 14.2 37 ZeroCERT

30994 2022-05-19 11:33 vbc.exe  

57d5a8f8fdd09080d20d3e02e9b38e39


RAT PWS .NET framework PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		2.8 42 ZeroCERT

30995 2022-05-19 11:32 ybc.exe  

06f7be0f46c7ab974296fab19e27d72a


RAT AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic ICMP traffic unpack itself WriteConsoleW 		3 7 1 3.8 20 ZeroCERT

30996 2022-05-19 11:32 vbc.exe  

864bbb6314ae4dda7385906f77fafd29


Formbook RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		8 17 1 4 11.8 M 27 ZeroCERT

30997 2022-05-19 11:31 .winlogon.exe  

4c86de3ecf018c944d5d92fa8e65a568


PWS[m] PWS .NET framework email stealer DNS Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk VM Disk Size Check Windows DNS Cryptographic key crashed 		2 10.0 24 ZeroCERT

30998 2022-05-19 11:30 012ad0ea06b8f77deba8c35e8c0088...  

b9f57465b9327dc74ac5c2516d0e9002


Emotet UPX Malicious Packer Malicious Library PE32 OS Processor Check PE File VirusTotal Malware Check memory Check virtual network interfaces Tofsee 		1 5 1 2.2 28 ZeroCERT

30999 2022-05-19 11:27 game-installer.torrent.exe  

15de4c1a25c5466f420f48738f10dc29


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself RCE DNS 		1 3.0 53 ZeroCERT

31000 2022-05-19 11:26 bobbyzx.exe  

f09c574d47617319ec0a826217a22a70


PWS .NET framework PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.8 30 ZeroCERT

31001 2022-05-19 11:25 Bdf.exe  

4356ec13f3ecf498927e9201c486efe8


PWS[m] RAT PWS .NET framework Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		3 4 13.8 18 ZeroCERT

31002 2022-05-19 11:24 vbc.exe  

e88e40a62db068f13a05e03dfb353e90


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE DNS 		1 3.0 32 ZeroCERT

31003 2022-05-19 11:24 vbc.exe  

f1f8fb39e415aa754ab38f42e9f6bb68


Formbook RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6 13 1 4 12.8 M 43 ZeroCERT

31004 2022-05-19 11:23 becda8cf74894fc066a7c672773ba9...  

18eccb1cb55d8d0f85f051a4051e590d


Emotet UPX Malicious Packer Malicious Library PE32 OS Processor Check PE File VirusTotal Malware Check memory Check virtual network interfaces Tofsee 		1 5 1 2.2 26 ZeroCERT

31005 2022-05-19 11:21 dj.exe  

dd6738b8bd7f1450c7c21f6bd71b6fa2


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself DNS 		4 8 2 6.4 41 ZeroCERT

keyword