popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
38701 2021-11-05 10:50 v8hBqWuKscbjZRqNatPw.exe  

b5bd8dfef7366e06844f2b8595dd9910


Generic Malware UPX PE File PE32 .NET EXE MachineGuid Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder Windows ComputerName 		1 4 1 5.2 ZeroCERT

38702 2021-11-05 10:47 udptest.exe  

f98dfeecf4e63cb4d768f41491cc9a0b


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.2 28 ZeroCERT

38703 2021-11-05 10:45 vbc.exe  

898badd240f8d99c109b1c8647eaa1f1


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.8 22 ZeroCERT

38704 2021-11-05 10:45 r4XZt5MYHpEdcdmzqr2D.exe  

fffd2903ec20ac275330f9d1d36f991d


Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces ComputerName crashed 		1 2 4.6 44 ZeroCERT

38705 2021-11-05 10:43 serwices.exe  

486700627b68a06007dac77bd7efebb4


[m] Generic Malware Themida Packer task schedule Anti_VM UPX AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted unpack itself Windows utilities Checks Bios Detects VirtualBox Detects VMWare WriteConsoleW VMware anti-virtualization Windows ComputerName Firmware crashed 		10.8 35 ZeroCERT

38706 2021-11-05 10:43 watchdog.exe  

e0a50c60a85bfbb9ecf45bff0239aaa3


PE File PE32 VirusTotal Malware Creates executable files WriteConsoleW Trojan 		4.4 50 ZeroCERT

38707 2021-11-05 09:46 index-294441975.xls  

294c6091ed8f9b30fabca946bc2e48ee


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 3.6 guest

38708 2021-11-05 09:44 index-295687290.xls  

4309aadc0b51d58084832e45cba1e1dd


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 3.6 guest

38709 2021-11-05 09:43 vbc.exe  

d06c38d984a2f6e270ff39ece951c090


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		13 33 2 7.8 20 ZeroCERT

38710 2021-11-05 09:39 vbc.exe  

ab47f89cf986d9e52822873e0052e7d4


Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		3 4 1 3.2 14 ZeroCERT

38711 2021-11-05 09:38 5334_1636030207_6453.exe  

d32aed7204ae5bf456dc9d1be2c53d9e


RAT NPKI Generic Malware Antivirus Malicious Library UPX AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE Malware download NetWireRC VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AntiVM_Disk WriteConsoleW VM Disk Size Check DCRat Windows ComputerName RCE DNS crashed 		1 1 1 9.8 38 ZeroCERT

38712 2021-11-05 09:37 clp_wsfmvg.exe  

82ec554886de723258094e5509e76556


Emotet Gen1 RAT [m] Generic Malware Generic Malware task schedule Malicious Library UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE64 PE File PE32 .NET EXE VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder WriteConsoleW Tofsee Windows ComputerName RCE DNS Cryptographic key 		1 3 1 15.2 17 ZeroCERT

38713 2021-11-05 09:36 ethm2305.exe  

ee30d6928c9de84049aa055417cc767e


Gen2 Formbook Generic Malware UPX Malicious Library PE File PE32 OS Processor Check Malware download VirusTotal Malware suspicious privilege MachineGuid buffers extracted WMI Creates executable files AppData folder sandbox evasion WriteConsoleW Tofsee Windows ComputerName DNS Downloader 		7 18 7 9.2 45 ZeroCERT

38714 2021-11-05 09:36 vbc.exe  

39da7ab7a964862e9005e9e38d9c7568


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 9.2 28 ZeroCERT

38715 2021-11-05 09:34 nwamazx.exe  

22f934036d8405eaf679a08f51babbec


RAT PWS .NET framework Gen1 Generic Malware UPX Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check DLL JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Phishing Cryptocurrency wallets Cryptocurrency PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check OskiStealer Stealer Windows Chrome Browser Email ComputerName Password 		10 2 7 15.8 20 ZeroCERT

keyword