popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
32866 2022-04-01 17:34 xOvCgoYFAIVjwy6I  

5d9072ac79b1bb3bf7eb14ba453b2dd7


UPX Malicious Library OS Processor Check DLL PE32 PE File Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Report Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		17 9 6.2 M 24 ZeroCERT

32867 2022-04-01 10:17 ikenna.exe  

0b117d9e4b5490cc16047ac4e88c39a1


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		2 5 1 5.6 M 32 ZeroCERT

32868 2022-04-01 10:17 random.exe  

aa205cebb1ffbbf7b96723fe050920f4


PWS .NET framework AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 M 26 ZeroCERT

32869 2022-04-01 10:15 DeliveryFailure-1355544076.xls...  

4e0c433fb83e4f67c7a8513c534ab430


Malicious Library Excel Binary Workbook file format(xlsb) Malware Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself suspicious process Exploit DNS crashed 		2 3 2 5.2 M guest

32870 2022-04-01 10:12 4HYGX  

d913ef1d26e6be4f24fa54acad316d15


UPX Malicious Library OS Processor Check DLL PE32 PE File Dridex TrickBot ENERGETIC BEAR Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		27 8 4.6 ZeroCERT

32871 2022-04-01 10:11 DeliveryFailure-1024814197.xls...  

203d53a5ebf20ae245d32aa992cfde1b


Malicious Library Excel Binary Workbook file format(xlsb) Malware Malicious Traffic Creates executable files unpack itself suspicious process DNS 		2 3 2 4.2 M guest

32872 2022-04-01 10:07 LXZv9wBqLH  

095a6022bc409e929e1aa60d411f966f


UPX Malicious Library DLL PE32 PE File Dridex TrickBot ENERGETIC BEAR Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		17 9 5.0 M ZeroCERT

32873 2022-04-01 10:04 IwvOXl  

d6bd5d7cb234e255224fb22e071e5732


UPX Malicious Library DLL PE32 PE File Dridex TrickBot ENERGETIC BEAR Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		17 9 5.0 ZeroCERT

32874 2022-04-01 09:59 jw4uRpR7XrZnvyTJN2ge  

2f277053236a9ce84c78412a34de3a64


MS_XLSX_Macrosheet UPX Malicious Library OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Report AutoRuns Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Kovter Windows Exploit ComputerName DNS crashed 		29 11 10.6 M 25 ZeroCERT

32875 2022-04-01 09:58 kaks.exe  

f2b4fdf20acd1e717e3db2605d2b8734


Generic Malware Malicious Packer AntiDebug AntiVM PE32 PE File Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Mars Stealer Stealer Windows Browser Email ComputerName DNS 		2 1 1 2 10.8 M 40 r0d

32876 2022-04-01 09:34 O  

e148a3deac1b1fffc9b34e9877ed936f


MS_XLSX_Macrosheet UPX Malicious Library OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Report AutoRuns Creates executable files ICMP traffic RWX flags setting unpack itself Auto service suspicious process sandbox evasion Kovter Windows ComputerName DNS 		1 29 11 9.6 26 ZeroCERT

32877 2022-04-01 09:28 WCD7JXOaNqO6.sct  

9ee87d1b88207939d3560670a939fe79


Antivirus ScreenShot AntiDebug AntiVM Code Injection 		1.0 ZeroCERT

32878 2022-04-01 09:17 8eIaFcv4BzK  

ee566bce2f129e661d5382c16435031b


MS_XLSX_Macrosheet UPX Malicious Library OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot ENERGETIC BEAR Malware Report AutoRuns Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Kovter Windows Exploit ComputerName DNS crashed 		1 29 11 9.8 ZeroCERT

32879 2022-04-01 07:49 VeBot_Cracked.exe  

764a4529f34a0f66b39fc95335ad5e8c


Gen1 UPX Malicious Library Malicious Packer AntiDebug AntiVM PE32 PE File OS Processor Check DLL Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE MachineGuid Code Injection Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process WriteConsoleW anti-virtualization installed browsers check Mars Stealer Stealer Windows Browser Email ComputerName DNS 		2 1 1 2 15.8 M 47 ZeroCERT

32880 2022-03-31 23:56 vbc.exe  

02074cf4dd384bc2a4bb2e40d057b36e


Loki UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 10.4 M 32 ZeroCERT

keyword