popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
33001 2022-03-29 18:32 vbc.exe  

b56daa79ce1d21efee3f6481572fae90


Loki Malicious Library UPX PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 3 10 1 11.4 M 34 ZeroCERT

33002 2022-03-29 18:31 vbc.exe  

6403569f222640afc2d34aaa91dc6a3b


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		5 10 1 5.6 M 32 ZeroCERT

33003 2022-03-29 18:30 vbc.exe  

6b3f562fed4b02f64fedca858435dad8


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself 		11 26 2 6.4 M 30 ZeroCERT

33004 2022-03-29 18:30 vbc.exe  

d844a312629808aa11a8813c4f92c9e5


PWS[m] PWS .NET framework UPX SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Telegram suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 4 11.6 M 21 ZeroCERT

33005 2022-03-29 18:28 vbc.exe  

95fed5ca9d7e7b30795bbfc52024baa9


Loki Malicious Library UPX PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 10.0 M 35 ZeroCERT

33006 2022-03-29 18:26 vbc.exe  

694199269a9a455dc84e388f592ac636


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself 		3 7 1 1 5.4 M 24 ZeroCERT

33007 2022-03-29 18:25 .win32.exe  

819b4c7c0922d5b882f74fab0ead1e4f


Generic Malware Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself DNS 		1 2.0 M 25 ZeroCERT

33008 2022-03-29 18:24 CDQ.exe  

271a615ca2750512c76bffae116135df


AgentTesla PWS[m] RAT browser info stealer Google Chrome User Data ScreenShot Create Service Socket DNS Code injection Sniff Audio KeyLogger Downloader Escalate priviledges AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key DDNS crashed keylogger 		3 1 18.0 M 18 ZeroCERT

33009 2022-03-29 18:24 neworder019209.exe  

e7054a13910b427ad6a5187a0ae7fe86


Malicious Library UPX PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 11.0 M 28 ZeroCERT

33010 2022-03-29 18:22 sammy.exe  

c8feea08103ca5a05b2aed8d80ad073f


Malicious Library UPX PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 11.0 M 27 ZeroCERT

33011 2022-03-29 18:21 build.exe  

0a1db748908d7d1124091bbee8acd691


RAT .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName 		2 3.4 M 37 ZeroCERT

33012 2022-03-29 18:21 vbc.exe  

e579a1039eb1d5be440cff7422fe4a14


ASProtect PE32 PE File FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic buffers extracted ICMP traffic unpack itself sandbox evasion ComputerName DNS 		13 26 1 8.6 M 32 ZeroCERT

33013 2022-03-29 18:19 vbc.exe  

0af11be93fd49bde3f5dc03a3b92cbb9


RAT .NET EXE PE32 PE File VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces suspicious process WriteConsoleW ComputerName 		1 2 3.8 M 19 ZeroCERT

33014 2022-03-29 18:17 vbc.exe  

b469a2fa7fe936cdbea6fa2c8696c259


PWS[m] PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		2 2 12.6 M 17 ZeroCERT

33015 2022-03-29 18:17 data64_4.exe  

44190ba0aca367c665844c7b35c416cf


Obsidium protector UPX .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI RWX flags setting unpack itself Collect installed applications sandbox evasion installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 1 11.0 M 26 ZeroCERT

keyword