popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
31006 2022-05-19 11:21 iU2SYlfYxsk  

918fd1f190f9e56b690e0112e80cada4


UPX Malicious Library OS Processor Check DLL PE File PE64 AutoRuns Checks debugger unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Windows ComputerName DNS crashed 		1 5.6 ZeroCERT

31007 2022-05-19 11:20 12b567fef82d514a049230185bd089...  

ff28458c69cbc9c12e64266bf2f7af40


Emotet UPX Malicious Packer Malicious Library PE32 OS Processor Check PE File VirusTotal Malware Check memory Check virtual network interfaces Tofsee 		1 5 1 2.2 20 ZeroCERT

31008 2022-05-19 11:20 2351ab4dd6c480c070926ef53ee7a5...  

12ef3ea1955d62e8ab5bb604966972cb


Emotet UPX Malicious Packer Malicious Library PE32 OS Processor Check PE File VirusTotal Malware Check memory unpack itself Check virtual network interfaces Tofsee DNS 		1 5 1 3.2 27 ZeroCERT

31009 2022-05-19 11:18 po kipo000903 ( kind122822 )....  

22bde89a8afcad7436370bcbc8a6b1ea


UPX Malicious Library PE32 PE File OS Processor Check FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		11 22 2 8.0 42 ZeroCERT

31010 2022-05-19 11:17 14b4e4efa6b587ddde956d90e1b979...  

49a3826a6ddfce6b29f76a6c58feb336


Emotet UPX Malicious Packer Malicious Library PE32 OS Processor Check PE File VirusTotal Malware Check memory Check virtual network interfaces Tofsee 		1 4 1 2.2 25 ZeroCERT

31011 2022-05-19 11:16 .winlogon.exe  

23d55ec743bb3c696c73ac8e3c8266f1


PWS[m] RAT PWS .NET framework email stealer Socket DNS Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		1 9.8 43 ZeroCERT

31012 2022-05-19 11:14 dialozx.exe  

e6cebdd29b713d054f636e09fa411924


Formbook RAT PWS .NET framework AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		7 18 1 9.0 35 ZeroCERT

31013 2022-05-19 11:14 vbc.exe  

5163d334cdd1a55b19385ed4ad0f1d3a


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE 		2.4 32 ZeroCERT

31014 2022-05-19 11:14 vbc.exe  

0ee2a81aae42ac9b413f02979c6ce6f9


HermeticWiper UPX Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself RCE 		2.4 45 ZeroCERT

31015 2022-05-19 11:12 mine2.exe  

be75e9e51767b5a59536afbbf9ffafbc


Confuser .NET PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 4.4 28 ZeroCERT

31016 2022-05-19 11:12 40eaec2198d3972b509c91a36cf992...  

86b68c244c6185ec27764e88709246d3


Emotet UPX Malicious Packer Malicious Library PE32 OS Processor Check PE File VirusTotal Malware Check memory Check virtual network interfaces Tofsee 		1 4 1 2.2 21 ZeroCERT

31017 2022-05-19 11:12 9b4c8b3c378343f781a61a72f36d75...  

03ff2a4a17ca497d23b742ebb1c07346


Emotet UPX Malicious Packer Malicious Library PE32 OS Processor Check PE File VirusTotal Malware Check memory unpack itself Check virtual network interfaces Tofsee 		1 4 1 2.6 21 ZeroCERT

31018 2022-05-19 09:20 bta.exe  

9fef8755cf21e3579b88945398492bf5


RAT AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		6 8 6 2 10.0 23 ZeroCERT

31019 2022-05-19 09:19 vbc.exe  

ade32559a442031d0e5040a96639bd66


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself RCE 		2.6 45 ZeroCERT

31020 2022-05-19 09:18 mine3.exe  

ff72b295ded9889cee24320db368bcf1


Confuser .NET PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		3.6 24 ZeroCERT

keyword