popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
40036 2021-10-28 11:35 163.exe  

9a7146fc6a650f4e344aa8102c5986e2


RAT NPKI Generic Malware Malicious Packer VMProtect Malicious Library AntiDebug AntiVM PE File PE32 .NET EXE PE64 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 8 1 1 13.4 M 23 ZeroCERT

40037 2021-10-28 11:32 10-20-2021.PDF.jar  

668e3c7807e42329a01a3c85ccb17504

VirusTotal Malware Check memory Checks debugger RWX flags setting unpack itself Check virtual network interfaces WriteConsoleW DNS crashed 		1 3.4 20 ZeroCERT

40038 2021-10-28 11:30 vbc.exe  

585025734e3c4fed80865d8eedf61647


Loki NSIS Malicious Library UPX PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		2 2 10 1 10.6 32 ZeroCERT

40039 2021-10-28 11:29 JWMtirXqFC.png  

345eadc8b1f5d0b373b531902c06572e


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 15 ZeroCERT

40040 2021-10-28 11:26 162.exe  

33647b416fb2e49f3a8a57fd7b19c287


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 7.0 28 ZeroCERT

40041 2021-10-28 11:24 qYznSw.png  

e53a16bea7918b1f7d4c0e659febc766


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 14 ZeroCERT

40042 2021-10-28 11:24 po7cv1bb.tar  

2c9bae00aa5f17d0b9cfd75fcf7e05b7


Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.4 15 ZeroCERT

40043 2021-10-28 11:22 new3.exe  

0edc34831b45eded59bd2aeef85aa41b


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		15 29 1 2 5.8 28 ZeroCERT

40044 2021-10-28 11:22 alNtY.png  

ae4472036314048bcb8ed8c9c7b62446


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 14 ZeroCERT

40045 2021-10-28 11:22 vbc.exe  

66eaa64c0b3581cd9f183f9a1af0d33d


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		13.2 22 ZeroCERT

40046 2021-10-28 11:20 oWCwd.png  

22779bfc1d6843924f5e2875afbba259


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 14 ZeroCERT

40047 2021-10-28 11:18 oKwqQ.png  

edadfd868f1dd7590ec7c9581eaa146d


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 15 ZeroCERT

40048 2021-10-28 11:17 126808361.exe  

8c957f8e5cc91f649891254901d6293c


PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6.2 28 ZeroCERT

40049 2021-10-28 11:15 vbc.exe  

76a273a48d0d9e02adc29457e145f437


Loki NSIS Malicious Library UPX PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 1 10.4 M 29 ZeroCERT

40050 2021-10-28 11:15 vbc.exe  

df330ab2a2e5aa4ac947315ee3f93992


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 22 ZeroCERT

keyword