popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
35296 2022-01-19 17:32 nfxv.exe  

e745cce4bd299146c76b5deb19bba167


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		4 10 2 6.6 M 34 ZeroCERT

35297 2022-01-19 17:31 AxVZTvof0xPasb9nP  

a3bb2614f2dd81a4420b80f88ffc0dc8


Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion ComputerName DNS 		13 6.6 21 ZeroCERT

35298 2022-01-19 17:29 beerpeer.exe  

e7de72de8a439bab253a17638878f7d7


Generic Malware Malicious Library UPX Antivirus PE64 PE File OS Processor Check GIF Format VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key 		1 7.0 9 ZeroCERT

35299 2022-01-19 17:29 okeywed.exe  

2e2ef271e5626bcaac8f237a24657e9e


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName crashed 		9.0 16 ZeroCERT

35300 2022-01-19 15:27 2.ps1  

6422ede9aadd1a768cb57fe06c1155ad


RAT Gen2 Gen1 Generic Malware Antivirus Malicious Packer Malicious Library UPX PE64 PE File OS Processor Check VirusTotal Malware powershell AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates executable files unpack itself Windows utilities Auto service powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Firmware DNS Cryptographic key crashed 		2 1 15.8 13 ZeroCERT

35301 2022-01-19 15:27 LogBack.exe  

72c6966aeb1678235e6dfc6f53bcf7fd


Gen2 Gen1 Malicious Packer Malicious Library UPX PE64 PE File OS Processor Check VirusTotal Malware unpack itself ComputerName 		2.4 49 ZeroCERT

35302 2022-01-19 14:59 Doc-transfer_form.bat  

c64049c3adebb2d82e2f1da49c24b48b


PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		11.8 31 ZeroCERT

35303 2022-01-19 14:06 Jbbmfq.exe  

c467bc0aecc324a9f19d73d43397acdf


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware Malicious Packer Antivirus UPX DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName Cryptographic key Software crashed 		1 4 1 17.2 M 31 ZeroCERT

35304 2022-01-19 14:06 okeyt.exe  

7a430c03bbdc0d31c398f891c344ac02


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		9.6 M 38 ZeroCERT

35305 2022-01-19 14:04 HpsrSpoofer3.exe  

db1cb546c05ce3a129d921d3e2044aca


Malicious Library UPX PE File PE32 VirusTotal Malware 		1.2 M 47 ZeroCERT

35306 2022-01-19 14:04 .csrss.exe  

fb21dbd40d32aad4ee6d1ddbc35a84ba


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.4 M 24 ZeroCERT

35307 2022-01-19 14:03 9867015865498708.exe  

74297c562b78e23485d6a5376ac4e07d


PWS Loki[b] Loki.m RAT Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 3 17.2 M 24 ZeroCERT

35308 2022-01-19 14:02 vbc.exe  

d9ab8b5b7f9a66c8f521beecfe16037b


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 1 11.0 M 41 ZeroCERT

35309 2022-01-19 14:00 vbc.exe  

6c5f97adbd42158f2b8f9e029a24059a


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		10 23 3 6.0 M 38 ZeroCERT

35310 2022-01-19 14:00 dddddsdsdssds.exe  

97221305ce5f05743f46f1998db359ba


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.4 M 31 ZeroCERT

keyword