popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
40591 2021-10-15 09:55 CHILESKY.exe  

2838a508700df0b9ae80674c2f42ef4b


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.4 6 ZeroCERT

40592 2021-10-15 09:55 vbc.exe  

f11ebc7e0b269ee17f61f7a4ab4ce9ec


UPX Malicious Library PE File PE32 VirusTotal Malware 		1.0 M 14 ZeroCERT

40593 2021-10-15 09:53 h_online.exe  

2bfef42ea03e4fbb32243da6cb861205


PWS Loki[b] Loki.m .NET framework NPKI Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox malicious URLs AntiVM_Disk VMware anti-virtualization VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 16.4 M 42 ZeroCERT

40594 2021-10-15 09:53 vbc.exe  

e1ece154e7d217115851bb74b8b79e24


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows Browser Email ComputerName Cryptographic key Software crashed 		13.6 M 27 ZeroCERT

40595 2021-10-15 09:51 vbc.exe  

81ecab9fa2aa18c3d5dc61e9b2bebb7b


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		6 15 2 7.8 M 16 ZeroCERT

40596 2021-10-15 09:50 1st0build.exe  

fa36788c0488fe6f660e5ea1e9ca277a


RAT PWS .NET framework Generic Malware ASPack Malicious Packer UPX Malicious Library Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs suspicious TLD sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 7 1 18.2 M 38 ZeroCERT

40597 2021-10-15 09:49 PrimeAuth.exe  

6e88324fa975a177ec1aae3a7e9cbf0c


RAT PWS .NET framework Generic Malware UPX Malicious Library PE File PE32 OS Processor Check .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 47 ZeroCERT

40598 2021-10-15 09:46 vbc.exe  

09a2d9ea4a18f01aff698b8cfc98a87e


UPX Malicious Library PE File PE32 VirusTotal Malware DNS 		1 1.6 M 14 ZeroCERT

40599 2021-10-15 09:46 vbc.exe  

025eaccfdecb9df000e526122ce84aa2


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself RCE DNS 		1 3.2 M 31 ZeroCERT

40600 2021-10-15 09:44 aeopmguywjffmigwnfbefrvgqg.exe  

8d81b074c6351ef6cb801ddbc24d4354


PWS Loki[b] Loki.m Generic Malware task schedule Antivirus DNS KeyLogger ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process AppData folder WriteConsoleW IP Check Windows ComputerName DNS Cryptographic key DDNS crashed 		1 6 1 14.8 M 31 ZeroCERT

40601 2021-10-15 09:44 vbc.exe  

215e5cc2650d15c79ab17bd24e8458b9


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself RCE 		2.4 M 29 ZeroCERT

40602 2021-10-15 09:42 vbc.exe  

607afbfc6f90d724bd7014ca4ab30be5


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		20 21 1 8.2 M 18 ZeroCERT

40603 2021-10-15 09:41 vbc.exe  

10397feb14b5e8aad2b1e8fd3686763c


UPX Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself RCE 		2.4 M 37 ZeroCERT

40604 2021-10-15 09:41 LS.exe  

50bc873b8e08fdc5832350f377a1b5a7


UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself AppData folder Windows crashed 		4.0 M 43 ZeroCERT

40605 2021-10-15 09:40 me.exe  

8cbc2f3f7e55f6d8a1e28816d9621d0a


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Disables Windows Security Check virtual network interfaces WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 15.2 M 24 ZeroCERT

keyword