popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
38581 2021-11-18 18:08 hman.exe  

911a6c29d88bb2ec2dbe446ee35549a5


Generic Malware Antivirus AntiDebug AntiVM PE File PE32 VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key Downloader 		1 2 1 10.0 22 ZeroCERT

38582 2021-11-18 18:07 clipper.exe  

674ed99d03afc4da71fb05b6e8b315a8


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 44 ZeroCERT

38583 2021-11-18 18:05 d3dcompiler_47.dll  

7641e39b7da4077084d2afe7c31032e0


Gen2 Gen1 Anti_VM Malicious Library UPX PE64 PE File OS Processor Check DLL PDB Checks debugger unpack itself crashed 		1.0 C0d3_22

38584 2021-11-18 18:05 d3dcompiler_47.dll  

7641e39b7da4077084d2afe7c31032e0


Gen2 Gen1 Anti_VM Malicious Library UPX PE64 PE File OS Processor Check DLL PDB Checks debugger unpack itself crashed 		1.0 C0d3_22

38585 2021-11-18 18:02 WindowsHost.exe  

9f07b608fcd7bad488f0f444aaf89c65


RAT PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 33 ZeroCERT

38586 2021-11-18 17:17 AppVShNotify.exe  

0cf148aaf0f5be5768bebdc3c0eb0f87


Gen2 Gen1 Generic Malware UPX PE64 PE File OS Processor Check PDB 		0.2 C0d3_22

38587 2021-11-18 16:53 RuntimeBroker.exe  

ba4cfe6461afa1004c52f19c8f2169dc


Gen2 Gen1 Malicious Packer Malicious Library UPX PE64 PE File OS Processor Check PDB 		0.4 C0d3_22

38588 2021-11-18 16:52 pwahelper.exe  

45f3a40af44a20f61e92a0f98f63a347


Gen2 Generic Malware Malicious Packer Malicious Library UPX PE64 PE File OS Processor Check PDB 		0.4 C0d3_22

38589 2021-11-18 16:40 ScriptRunner.exe  

ea8c42a5c14b808d6b73ac5a6a871379


RAT Generic Malware PE File PE32 .NET EXE PDB MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key 		1.4 C0d3_22

38590 2021-11-18 15:02 GoalFit.exe  

b1815a67a3103f8c462bacc58cd0e0a1


Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		12 28 2 5.8 22 ZeroCERT

38591 2021-11-18 15:02 jpg01.jpg  

05b1c8f10da93f118ced2fe384929937


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process WriteConsoleW VMware anti-virtualization Windows ComputerName Cryptographic key Software 		1 3 1 13.2 26 ZeroCERT

38592 2021-11-18 15:01 quodqbqhlcvhzw.mp4  

b4c5c1e150afcd7386e83ef0da203f3b


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.2 17 ZeroCERT

38593 2021-11-18 15:01 clip.exe  

d888e5127c788faa6409059553ce0c02


Generic Malware Malicious Packer Malicious Library UPX PE File PE32 VirusTotal Malware Windows utilities WriteConsoleW Windows ComputerName 		2.4 45 ZeroCERT

38594 2021-11-18 15:01 test_16.exe  

ae2331eaded52fd561b9aad229952f3e


RAT PWS .NET framework Generic Malware task schedule Malicious Packer Antivirus Malicious Library UPX Create Service DGA SSL Socket Steal credential DNS SMTP Internet API Hijack Network Code injection Sniff Audio HTTP Dynamic Dns KeyLogger FTP Escalate VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows Advertising Google ComputerName DNS Cryptographic key DDNS crashed keylogger 		8 17 4 2 14.0 M 47 ZeroCERT

38595 2021-11-18 15:00 4529_1636965947_8152.exe  

dd44fcc300b5a71bda2be110819253ce


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 4 1 13.4 22 ZeroCERT

keyword