popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
40501 2021-10-18 18:01 lkki.exe  

f3301d2cf11d1d4884f4922ff204042b


Loki PWS Loki[b] Loki.m Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 7.4 M 63 ZeroCERT

40502 2021-10-18 17:58 invc_009030009.wbk  

ea27c453801a76553e850c260b6a288b


RTF File doc FormBook Malware download Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		31 29 8 8 4.0 M ZeroCERT

40503 2021-10-18 17:54 RunPE.dll  

ef4602191703199ba701c12b66971c73


RAT Generic Malware Malicious Packer PE File PE32 .NET DLL DLL VirusTotal Malware PDB 		1.0 21 ZeroCERT

40504 2021-10-18 17:52 EU-Business-Register (1).pdf  

ad93c19fcd03385c359be007ee7631f8


PDF VirusTotal Malware unpack itself Windows utilities Windows 		1.8 1 guest

40505 2021-10-18 17:52 PO-15102021.xlsx  

3649a4e4e640017f163b9f1f164a63b7

VirusTotal Malware Malicious Traffic RWX flags setting exploit crash unpack itself Exploit DNS crashed 		1 1 1 4.4 28 guest

40506 2021-10-18 16:12 vbc.exe  

081964c37b284b77cd71ce356461d1a4


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.6 M 21 guest

40507 2021-10-18 15:55 vbc.exe  

081964c37b284b77cd71ce356461d1a4


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.6 21 ZeroCERT

40508 2021-10-18 10:05 Update-KB4524143.ps1  

ef3cff5072eb2e63a67c32f6ff699afb


Generic Malware Antivirus VirusTotal Malware Check memory Checks debugger unpack itself ComputerName crashed 		2.4 M 15 ZeroCERT

40509 2021-10-18 10:02 questioneer-pdf.js  

93b27733d5e46b676eca9cf990652070

VirusTotal Malware WMI ComputerName 		1.6 15 ZeroCERT

40510 2021-10-18 09:53 e8084ec4de8c64eabd3169cee9ac27...  

1c58be0a33997195e1e9dbc5b9298ec6


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware Check memory Check virtual network interfaces Tofsee 		1 4 1 2.0 29 ZeroCERT

40511 2021-10-18 09:52 lv.exe  

e8719fad9816c40755e1c4821650e14b


Themida Packer PE64 PE File VirusTotal Malware unpack itself Windows crashed 		2.8 M 30 ZeroCERT

40512 2021-10-18 09:49 aa.exe  

4be25332520b26fccaf19093613142a8


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.8 13 ZeroCERT

40513 2021-10-18 09:47 customer8.exe  

0d00d5fc759ec02252080b3906e3f1cf


Gen2 Gen1 ASPack Malicious Packer Malicious Library UPX PE64 PE File VirusTotal Malware PDB RCE 		1.8 M 33 ZeroCERT

40514 2021-10-18 09:47 file.exe  

137dd682930e7c176439f7ce3a614b6a


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 28 ZeroCERT

40515 2021-10-18 09:45 cust9.exe  

22f5d12116ee1c11f3173f977bafc744


Gen2 Gen1 ASPack Malicious Packer Malicious Library UPX PE64 PE File VirusTotal Malware PDB RCE 		2.0 M 41 ZeroCERT

keyword