popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
35326 2022-01-19 11:49 vbc.exe  

8c88a72783f38705fe08730dfe01b40c


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName Software 		1 1 8.8 M 28 ZeroCERT

35327 2022-01-19 11:49 rae.exe  

088eb3f50215d88895e7f2215607e5d0


Gen1 Generic Malware Malicious Library UPX TEST Anti_VM PE64 PE File OS Processor Check DLL VirusTotal Malware Check memory Creates executable files crashed 		1.8 M 27 ZeroCERT

35328 2022-01-19 11:49 1.exe  

7fa457acce5d5487edb709a286052b79


Gen1 Gen2 UPX Malicious Library Malicious Packer TEST ASPack PE File PE32 DLL OS Processor Check VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Malicious Traffic Check memory buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS crashed 		4 4 3 10.0 M 27 ZeroCERT

35329 2022-01-19 11:48 vbc.exe  

701d8283da50a554d491d88adaa4987c


PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process suspicious TLD WriteConsoleW Windows ComputerName DNS Cryptographic key 		2 6 1 12.0 M 32 ZeroCERT

35330 2022-01-19 11:46 6247996184071914.exe  

284412fc352ae353414347de9079227b


RAT PWS .NET framework Generic Malware Antivirus UPX Malicious Packer Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		3 6 16.8 M 19 ZeroCERT

35331 2022-01-19 11:44 7611168006129179.exe  

160b96acafac45a88412986f20804ed2


RAT Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		3 8 15.4 M 28 ZeroCERT

35332 2022-01-19 11:43 .win32.exe  

8871c3cc72ab3378479b80c4422f5c70


Loki NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName Software 		1 2 1 10.0 M 27 ZeroCERT

35333 2022-01-19 11:42 0596482445864510.exe  

168678fe11459d971f16b66a55ee8bef


RAT Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		3 6 15.6 M 30 ZeroCERT

35334 2022-01-19 11:41 vbc.exe  

7d9f7b92a0d9fc1f456d6fbe4dd7e45b


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder 		14 27 14 6.6 M 24 ZeroCERT

35335 2022-01-19 11:41 xvcxcvxvx.ps1  

1603913e41a739484e311b6c572b4703


Generic Malware Antivirus PE File PE32 .NET DLL DLL VirusTotal Malware powershell Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		2 4 6.0 M 3 ZeroCERT

35336 2022-01-19 11:41 3100003070410006doc2pdf.exe  

865402c884897272e4228fc09f74d9b2


RAT Generic Malware Antivirus PDF AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check installed browsers check Windows Browser ComputerName Cryptographic key crashed 		6 2 17.4 M 27 ZeroCERT

35337 2022-01-19 11:37 csrss.exe  

a4c13722c598f133907c003dd0672743


Loki NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 1 11.6 M 24 ZeroCERT

35338 2022-01-19 11:37 03661025458.exe  

fae4e457b5286900c04ebf12a4bd7844


RAT Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		2 5 11.6 M 19 ZeroCERT

35339 2022-01-19 11:37 blessed-1gg.html  

8cafba8b9bf6d8223d678a826ece2e7f


Generic Malware TEST Antivirus AntiDebug AntiVM PNG Format powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		25 16 7.6 ZeroCERT

35340 2022-01-19 11:36 ve.html  

5c2e8fbd656903baac1dbcf81ac19e78


Generic Malware Malicious Packer Malicious Library UPX Antivirus AntiDebug AntiVM MSOffice File PE File OS Processor Check PE32 DLL VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Auto service powershell.exe wrote Check virtual network interfaces suspicious process sandbox evasion WriteConsoleW Windows Exploit ComputerName DNS Cryptographic key crashed 		3 37 17.2 M 7 ZeroCERT

keyword