popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
32881 2022-03-31 23:55 8haN  

b98c6ef0d51ef8c074efdd3d9e908027


UPX Malicious Library OS Processor Check DLL PE32 PE File Dridex TrickBot ENERGETIC BEAR Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		17 9 4.6 M ZeroCERT

32882 2022-03-31 23:55 midp.jpg  

5355154670a8e5261fe9d71f68b82aac

VirusTotal Malware 		0.8 M 29 ZeroCERT

32883 2022-03-31 23:52 Crypted.exe  

771ca3d222ad356cdf342e0810dbccb5


Gen1 UPX Malicious Library Malicious Packer AntiDebug AntiVM .NET EXE PE32 PE File OS Processor Check DLL Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Mars Stealer Stealer Windows Browser Email ComputerName DNS 		2 1 1 15.6 M 45 ZeroCERT

32884 2022-03-31 23:47 15280e00-7fca-11eb-80a4-74fb10...  

39fbb163c74178ee85c14570886bb196


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware Code Injection Check memory Checks debugger unpack itself Browser Email 		4.0 M 32 ZeroCERT

32885 2022-03-31 23:45 vbc.exe  

d638b63bad8888a8530a233d3480b257


UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 9.8 M 32 ZeroCERT

32886 2022-03-31 23:45 vbc.exe  

7c94aa32389a4c60deaff803f672082f


UPX Malicious Library PE32 PE File VirusTotal Malware ICMP traffic RWX flags setting unpack itself RCE crashed 		1 2 4.4 M 23 ZeroCERT

32887 2022-03-31 23:43 kaks.exe  

f2b4fdf20acd1e717e3db2605d2b8734


AntiDebug AntiVM PE32 PE File Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Mars Stealer Stealer Windows Browser Email ComputerName DNS 		2 1 1 10.0 M 39 ZeroCERT

32888 2022-03-31 23:43 vbc.exe  

4ff80074421cab2af69c56605f954d36


UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 9.8 M 36 ZeroCERT

32889 2022-03-31 23:41 loader7.exe  

db26325f7359def9589a1fb2d5a9c7a5


UPX Malicious Library PE32 PE File OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 9.8 M 36 ZeroCERT

32890 2022-03-31 23:40 vbc.exe  

c6c79e0dce5a0c4e5c7e6bbc70e9857f


Loki UPX Malicious Library PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 2 7 1 9.8 M 24 ZeroCERT

32891 2022-03-31 23:39 vbc.exe  

31bd61238d81bc1306ee4b216eb267d6


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder Windows 		4 8 1 2 7.8 M 31 ZeroCERT

32892 2022-03-31 23:38 vbc.exe  

671c417da43176bf5ed787059f578f51


UPX Malicious Library PE32 PE File VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 M 32 ZeroCERT

32893 2022-03-31 23:36 waw.exe  

b16bfe691894734cdd7bebd68ea1ae0f


Formbook RAT AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Discord ComputerName DNS Cryptographic key crashed 		11 24 5 8 10.2 M 31 ZeroCERT

32894 2022-03-31 23:36 Jp2MHuMgZeLCQmE.exe  

57d3f379290c4e93822080034c6276b6


PWS[m] PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download VirusTotal Email Client Info Stealer Malware AgentTesla powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Checks Bios Detects VirtualBox powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW VMware anti-virtualization Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 15.8 M 40 ZeroCERT

32895 2022-03-31 23:36 apa.jpg  

10ac30ebbed68584400f8ccd814e2a60


ELF VirusTotal Malware 		1.0 M 36 ZeroCERT

keyword