popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
38716 2021-11-05 09:34 YConsoleApp117all.exe  

b86c000007846c924e1f4a82a842686f


RAT Generic Malware task schedule Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Dridex TrickBot VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself suspicious process WriteConsoleW Kovter Windows ComputerName DNS Cryptographic key crashed 		5 1 12.0 31 ZeroCERT

38717 2021-11-05 09:31 sefile2.exe  

38055b609cbc5df14fd86be301eb6397


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.6 23 ZeroCERT

38718 2021-11-05 09:31 9801_1635938030_9423.exe  

a26c091f560286c77dc695818846a27e


RAT PWS .NET framework Gen1 Gen2 Generic Malware MPRESS UPX Malicious Packer Malicious Library ASPack PE File PE32 DLL .NET EXE OS Processor Check PE64 Malware download Raccoon VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency RecordBreaker Buffer PE MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates executable files unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare AppData folder VMware anti-virtualization installed browsers check Tofsee Stealer Windows Browser Email ComputerName RCE Firmware DNS crashed 		9 5 8 3 14.6 31 ZeroCERT

38719 2021-11-05 09:31 vbc.exe  

2b12e8bec8e8469f62fd8469f5a8f417


RAT Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		7 18 2 9.8 32 ZeroCERT

38720 2021-11-05 09:30 vbc.exe  

221ee3fdee780aa3b465ae9c6c20560b


Loki PWS Loki[b] Loki.m Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.6 26 ZeroCERT

38721 2021-11-05 09:30 bypass.txt.ps1  

398676189544dc8480ecb361490f2c1d


Generic Malware Antivirus VirusTotal Malware powershell Malicious Traffic Check memory buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 1 5.4 14 ZeroCERT

38722 2021-11-05 09:27 socks.exe  

177f3023ad736fa45c52b45259175e70


SystemBC Malicious Packer Malicious Library PE File PE32 VirusTotal Malware AutoRuns unpack itself AntiVM_Disk VM Disk Size Check Windows DNS 		2 3.6 48 ZeroCERT

38723 2021-11-05 09:25 sefile3.exe  

243cfd8dcfcd15e22adaee76d4852471


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.6 51 ZeroCERT

38724 2021-11-05 09:25 1302_1635887431_6241.exe  

a7194594cf6c6e4c5b683243caa5ca29


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		2 9.6 42 ZeroCERT

38725 2021-11-05 09:25 2939_1635967838_5945.exe  

b3d831056b7b55304a06d7e0bfafbd44


Gen1 RAT Gen2 [m] Generic Malware Themida Packer Generic Malware task schedule Anti_VM Malicious Library UPX Malicious Packer ASPack Steal credential ScreenShot Http API AntiDebug AntiVM PE File PE32 DLL OS Processor Check JPEG Format PE64 Malware download Raccoon VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency RecordBreaker Buffer PE MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare AppData folder AntiVM_Disk suspicious TLD WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Stealer Windows Browser Email ComputerName Firmware DNS crashed 		9 4 9 3 18.0 37 ZeroCERT

38726 2021-11-05 09:24 1323_1635962037_1167.exe  

036f4601b88c52668d279cf3fcce2a97


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 11 1 14.0 33 ZeroCERT

38727 2021-11-05 09:23 Cube_WW14.bmp  

7c53b803484c308fa9e64a81afba9608


RAT Gen1 Generic Malware Malicious Packer Malicious Library UPX ASPack PE File OS Processor Check PE32 .NET EXE PE64 DLL Browser Info Stealer Malware download VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Disables Windows Security Check virtual network interfaces AppData folder AntiVM_Disk suspicious TLD sandbox evasion IP Check VM Disk Size Check Tofsee Windows Browser ComputerName RCE DNS crashed 		32 39 10 10 14.8 M 49 ZeroCERT

38728 2021-11-05 09:23 kak.exe  

3b25bb47c77da6404c1b75133ccf2b1f


RAT Gen1 Gen2 Lazarus Family Emotet Trojan_PWS_Stealer Generic Malware Themida Packer UltraVNC Credential User Data Malicious Library UPX Malicious Packer ASPack Admin Tool (Sysinternals etc ...) Anti_VM Antivirus SQLite Cookie AntiDebug Ant Browser Info Stealer Malware download VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD sandbox evasion VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		69 78 22 25.2 M 45 ZeroCERT

38729 2021-11-05 09:23 ConsoleApp16.exe  

519c77369218476103250e9d89e0db48


AgentTesla browser info stealer Generic Malware Google Chrome User Data Create Service Socket Code injection Sniff Audio KeyLogger Escalate priviledges Downloader AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed keylogger 		2 11.4 23 ZeroCERT

38730 2021-11-05 09:21 187.exe  

72f4779d8e2878b5aefb4fca91c7c5b0


RAT Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces anti-virtualization Tofsee Windows ComputerName DNS Cryptographic key 		1 5 1 8.4 ZeroCERT

keyword