popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
39946 2021-10-29 09:54 FiCas AG Job Description.lnk  

3c324706e3bae0b7187b134a813011cb


Generic Malware Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM GIF Format VirusTotal Malware Code Injection Check memory Creates shortcut RWX flags setting Check virtual network interfaces suspicious process malicious URLs Tofsee Interception 		2 4 1 5.0 20 ZeroCERT

39947 2021-10-29 09:53 loader1.exe  

d2664cef24240dc8eb16f39c37228757


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder suspicious TLD DNS 		26 27 5 6.8 30 ZeroCERT

39948 2021-10-29 09:53 Declaration of Asset.pdf.lnk  

47fe3905ba9f09a7b2d4fee3981e9f87


NPKI Generic Malware AntiDebug AntiVM GIF Format Code Injection Check memory buffers extracted Creates shortcut RWX flags setting unpack itself Check virtual network interfaces suspicious process AntiVM_Disk VM Disk Size Check Tofsee Interception DNS 		2 4 2 5.0 ZeroCERT

39949 2021-10-29 09:48 xso.exe  

257679d1ffeaa47dcea2491b13637e50


RAT Generic Malware UPX AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		3 7 1 8.2 22 ZeroCERT

39950 2021-10-29 09:47 os.exe  

95ba9d5a5cd05fec041a876e1e2b66b2


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.0 24 ZeroCERT

39951 2021-10-29 09:45 set.exe  

4d1524f643dfdc491de426572a7d38e6


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 11.4 M 31 ZeroCERT

39952 2021-10-29 09:45 eo.exe  

fb0d1d127da05d102f94ef77ab205875


PWS Loki[b] Loki.m RAT Generic Malware Socket DNS Internet API HTTP KeyLogger ScreenShot Http API AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Browser ComputerName DNS 		1 1 1 9.6 17 ZeroCERT

39953 2021-10-29 09:45 loader2.exe  

25f27297055176dde7fb735ee70eaa8f


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder 		12 22 2 7.0 25 ZeroCERT

39954 2021-10-29 09:44 vx.exe  

b8b06e334cfa1e325851a840065b6aa1


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		6 10 2 1 8.4 35 ZeroCERT

39955 2021-10-29 09:43 fed.exe  

e574ad4af9b6fc033fdf0b54ca7bf014


PWS Loki[b] Loki.m RAT Gen1 Gen2 Generic Malware Malicious Packer Malicious Library UPX Socket DNS Internet API HTTP KeyLogger ScreenShot Http API AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Ransomware Zeus Windows Browser Email ComputerName DNS Software 		1 1 3 18.0 23 ZeroCERT

39956 2021-10-29 09:40 vbc.exe  

ff1c94584214d5eef525a0d3ff196a8b


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		16 17 4 2 9.4 21 ZeroCERT

39957 2021-10-29 09:40 kontrol.exe  

ae2ab79ae3a03b8af8ca9aa7a3e9d445


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 10.0 33 ZeroCERT

39958 2021-10-29 09:38 ens.exe  

e38e18c6b8fc1f9abd0ed7ce9aa45fda


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.4 30 ZeroCERT

39959 2021-10-29 09:37 EgAXWEL.exe  

a21083e3799762685013f624ef688c60


Emotet NPKI Malicious Library UPX Anti_VM Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM PE File Browser Info Stealer Malware download VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check SectopRAT Windows Browser Backdoor ComputerName RCE DNS Cryptographic key crashed 		1 4 1 16.6 16 ZeroCERT

39960 2021-10-29 09:36 A540bo3mQDlYqpH30620D.exe  

781fb23a988efab21e4ab321aa932b09


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself ComputerName 		2.4 17 ZeroCERT

keyword