popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
33031 2022-03-29 10:04 XC9.exe  

401c2310332df57b56b12416be948470


PWS[m] RAT PWS .NET framework email stealer Generic Malware Antivirus DNS Internet API Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM .NET EXE PE File PE32 powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		2 1 11.2 M ZeroCERT

33032 2022-03-29 10:02 ghostun.exe  

904f6a034bd611111921696a293806d5


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.4 M 27 ZeroCERT

33033 2022-03-29 10:00 33.exe  

64d7045bb593fcb01e73d22c1cfcc38c


Generic Malware Malicious Packer Malicious Library UPX OS Processor Check PE File PE32 VirusTotal Malware Check memory Windows DNS DDNS keylogger 		2 1 3.0 M 54 ZeroCERT

33034 2022-03-29 10:00 stp.jpg  

c57458c975e484181ad2b5f69228ff6d


Malicious Library UPX PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		2 3 11.4 M 30 ZeroCERT

33035 2022-03-29 09:58 Bills.html  

102279ff9669e073b6a2641a1d34c6e9


Formbook AntiDebug AntiVM MSOffice File Code Injection exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.4 ZeroCERT

33036 2022-03-29 09:58 O2Z1HMebIXiHYBBS  

d4aebb327243895ce7254996bb2f85aa


Malicious Packer Malicious Library UPX OS Processor Check DLL PE File PE32 Dridex TrickBot VirusTotal Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		30 11 5.8 M 18 ZeroCERT

33037 2022-03-29 09:56 vbc.exe  

c2c50555ad59c413114dc3e71fdcf64c


PWS[m] RAT PWS .NET framework SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.6 M 18 ZeroCERT

33038 2022-03-29 09:55 root.exe  

49085fa9f78999122e55dd7e95f950df


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.4 M 27 ZeroCERT

33039 2022-03-29 09:54 e3e30ac5222c12da7593c10aa56bbb...  

ad565b51665416d2abe47cc462df2dcd


Emotet Malicious Packer Malicious Library UPX OS Processor Check PE File PE32 VirusTotal Malware Check memory unpack itself Check virtual network interfaces Tofsee RCE 		1 4 1 3.0 M 32 ZeroCERT

33040 2022-03-29 09:54 vbc.exe  

1821678eb54e3802418df29c85bcb0a4


Loki Malicious Library UPX PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 10.2 M 25 ZeroCERT

33041 2022-03-29 09:51 vbc.exe  

818109bbfd025ef72c7cb41006ff9e6a


Formbook AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		12 29 2 8.0 M 16 ZeroCERT

33042 2022-03-29 09:51 sfGsF  

ac0df56c97c8ccbb36187fd6cf7d6502


Malicious Packer Malicious Library UPX OS Processor Check DLL PE File PE32 Dridex TrickBot VirusTotal Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		29 11 5.8 19 ZeroCERT

33043 2022-03-29 09:51 30C  

31df52782ab71cab086d403ef124b251


Malicious Packer Malicious Library UPX OS Processor Check DLL PE File PE32 Dridex TrickBot VirusTotal Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		29 11 5.8 19 ZeroCERT

33044 2022-03-29 09:49 .csrss.exe  

c1a9a80852abba625c95128152d311ed


Loki Malicious Library UPX PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself suspicious TLD installed browsers check Browser Email ComputerName DNS Software 		1 2 9 1 9.6 M 25 ZeroCERT

33045 2022-03-29 09:49 jquery.matchHeight.js  

8c73009d85d91bf7e8041528942d6ed8

unpack itself crashed 		0.6 guest

keyword