popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
32926 2022-03-31 10:21 vbc.exe  

5b9d23eb5a8f6d5578897abbecfe3d37


AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.6 M 38 r0d

32927 2022-03-31 10:09 csrss.exe  

6b58b7e02d133969181172d3cc544637


Loki PWS[m] PWS Loki[b] Loki.m .NET framework DNS AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 1 14.8 M 41 ZeroCERT

32928 2022-03-31 10:07 vbc.exe  

31ffdc4b2379bfbdc3d8d62ee69720c2


RAT Generic Malware Antivirus .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		1 2 1 6.8 M 35 ZeroCERT

32929 2022-03-31 10:05 FileForLoader.exe  

60cf152f092168ce53bc6f66bb91956d


RAT .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 4.2 M 33 ZeroCERT

32930 2022-03-31 10:03 vbc.exe  

5b9d23eb5a8f6d5578897abbecfe3d37


AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		10 25 2 1 9.8 M 38 ZeroCERT

32931 2022-03-31 10:03 239.exe  

fb89d57447db2445a18842b156ede54a


PWS[m] RedLine stealer[m] AntiDebug AntiVM PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare VMware anti-virtualization installed browsers check Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 14.6 M 34 ZeroCERT

32932 2022-03-31 10:02 D.58921AOMOska.html  

ba0c00aa1170ea47b010db152e92c7d4


NPKI AntiDebug AntiVM MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		4 2 2 4.2 ZeroCERT

32933 2022-03-31 09:59 vbc.exe  

79fc587b75385d13a0aefbb63b8f83a5


PWS .NET framework Generic Malware Antivirus .NET EXE PE32 PE File VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		8.4 39 ZeroCERT

32934 2022-03-31 09:58 GNF-866237674854.xlsm  

bcd007295846c9b233f30b7cfb3b5e3f


emotet MS_XLSX_Macrosheet Malicious Library UPX OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot Malware Report AutoRuns Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Kovter Windows Exploit ComputerName DNS crashed 		1 22 8 1 10.2 M ZeroCERT

32935 2022-03-31 09:52 vbc.exe  

f6a14671885a91da7686771f406ba217


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		17 28 1 5.6 M 33 ZeroCERT

32936 2022-03-31 09:51 vbc.exe  

e07b836d7100bdf914686d2a75013f5c


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself 		1.6 M 39 ZeroCERT

32937 2022-03-31 09:48 crax.exe  

55231926e74063b6a50f6588a46976bb


RAT PWS .NET framework Antivirus Malicious Packer Malicious Library UPX OS Processor Check .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 51 ZeroCERT

32938 2022-03-31 09:48 loader4.exe  

686edb2f5b2e85e6dcc315bb30ff5af2


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder Windows 		10 24 1 8.0 M 41 ZeroCERT

32939 2022-03-31 09:47 HLDoANj  

2dfac1fecaf2e2f74aa1b195d50ea1e3


Malicious Library UPX OS Processor Check DLL PE32 PE File Dridex TrickBot Malware Report Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		21 5 5.8 ZeroCERT

32940 2022-03-31 09:45 vbc.exe  

e55fd41ca43acc27eb8ad30de08b1e7e


PWS[m] RAT UPX Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 3 13.4 M 44 ZeroCERT

keyword