popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
38656 2021-11-18 10:27 f59ovCcsI09zqD8KZ0o.dll  

bd63c91ebde9fde16b3ce1b890074baa


PE File PE32 DLL VirusTotal Malware 		1.0 15 Kim.GS

38657 2021-11-18 10:25 f59ovCcsI09zqD8KZ0o.dll  

bd63c91ebde9fde16b3ce1b890074baa


PE File PE32 DLL VirusTotal Malware 		1.0 15 Kim.GS

38658 2021-11-18 10:04 y76gkOkGrbYHjh.dll  

722f898d814e4d04ed7c41bde6760eff


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Checks debugger unpack itself sandbox evasion ComputerName 		2.0 블루

38659 2021-11-18 08:43 XUBS  

86a05c561153b2d3c796ce5162523c40


Emotet Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Checks debugger unpack itself sandbox evasion Kovter ComputerName DNS 		28 5 5.6 36 ZeroCERT

38660 2021-11-18 08:42 emezx.exe  

476f7ccfae367d3a1379c260ca28b8d5


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 1 8.4 40 ZeroCERT

38661 2021-11-18 08:41 vbc.exe  

cad43af39f983c31ad5579ea34a31457


Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		14 23 2 4 5.8 28 ZeroCERT

38662 2021-11-18 08:37 at.exe  

0dcbd79d3ef702f1a33ae9fef6fdef06


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows DNS 		1 9.6 41 ZeroCERT

38663 2021-11-18 08:35 vbc.exe  

b8ecacd6489899bdfa00948c3992ea92


AgentTesla RAT PWS .NET framework browser info stealer Generic Malware Google Chrome User Data Antivirus Create Service Socket Code injection Sniff Audio KeyLogger Escalate priviledges Downloader AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process WriteConsoleW VMware anti-virtualization Windows ComputerName DNS Cryptographic key Software keylogger 		1 18.2 27 ZeroCERT

38664 2021-11-18 08:35 8102_1637053425_3753.exe  

58e37acf9f2ad681a0fdb5470315ed4f


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Collect installed applications powershell.exe wrote suspicious process WriteConsoleW installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 12.6 29 ZeroCERT

38665 2021-11-18 08:34 vbc.exe  

fae2478fe97d52d83a21c91e6148ed78


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		6 15 2 10.4 43 ZeroCERT

38666 2021-11-18 08:33 vbc.exe  

06451b346cd5a8c319f2ca34212ee91f


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.2 37 ZeroCERT

38667 2021-11-18 08:31 .csrss.exe  

47bb87e13ffafcf6abbc5908a48c4d08


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 14.2 25 ZeroCERT

38668 2021-11-18 08:31 jay.jpg  

bd5c3ee098497398ee0f1a08b37923e1


RAT PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 4 1 8.4 50 ZeroCERT

38669 2021-11-18 08:30 srfs.exe  

a32ab1ff2ec5f835b6456bb20a356e5e


Gen1 Generic Malware Themida Packer Malicious Library UPX Malicious Packer PE File PE32 OS Processor Check DLL Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Malicious Traffic Check memory Creates executable files unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare VMware anti-virtualization installed browsers check Windows Browser Email ComputerName Firmware DNS crashed 		8 1 3 12.2 36 ZeroCERT

38670 2021-11-18 08:29 6111_1636987952_2658.exe  

56324b7b63d05f41ce9b5b02a1a284f2


NPKI AntiDebug AntiVM PE File PE32 Browser Info Stealer FTP Client Info Stealer Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 11.2 ZeroCERT

keyword