popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
40636 2021-10-14 17:22 ETH2.exe  

13003cbfb6d2adfeea85952f8172c4f7


PE64 PE File VirusTotal Malware 		1.2 M 25 ZeroCERT

40637 2021-10-14 17:20 vbc.exe  

70d177abc7455c709ae9710630b9ea49


Loki NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 1 10.4 M 29 ZeroCERT

40638 2021-10-14 17:19 dow.exe  

481cc004b81afcb1ec10bb9985cc402b


Malicious Packer Malicious Library PE64 PE File VirusTotal Malware Code Injection buffers extracted 		3.0 M 33 ZeroCERT

40639 2021-10-14 16:57 WT_03986354356-39876354533.exe  

ca49afc18eb80ac0e4c784b3d093767d


PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 13.2 16 ZeroCERT

40640 2021-10-14 16:55 UFC~0398763535603876534536789....  

c1bd58337e98aec86544e0dd33924e61


PWS .NET framework Generic Malware UPX DNS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 13.2 10 ZeroCERT

40641 2021-10-14 16:54 Ord20211310570045368964AL.exe  

0cb1c28aaae7fb100c41281e5c9b6c2b


RAT PWS .NET framework Generic Malware task schedule Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		2 1 12.4 10 ZeroCERT

40642 2021-10-14 16:53 Ord20211310570045368963AC.exe  

f6fde8532e45bb49f3220e64c10d11a1


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		5 13 2 8.6 10 ZeroCERT

40643 2021-10-14 16:52 New Order.exe  

76ce20e50cfef6b8e5397b581105ba95


PWS .NET framework Generic Malware UPX Antivirus DNS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Malware download Nanocore Malware c&c powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 2 14.8 ZeroCERT

40644 2021-10-14 16:50 IMG.00000201419.PNG.scr  

664d73b23eddfcd0227786b9d0f5d022


Gen2 Gen1 Generic Malware UPX Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName RCE DNS DDNS crashed 		3 1 16.0 29 ZeroCERT

40645 2021-10-14 16:50 KRSEL0000056286.JPG.scr  

d6f040b4d7d217b8525dff843feba635


Gen2 Gen1 Generic Malware UPX Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName RCE crashed 		13.2 43 ZeroCERT

40646 2021-10-14 16:47 EXPORT DOCUMENTS_CMR_INVOICE_I...  

0a3212c04eeaed201c4038ab6dd3631b


Generic Malware UPX Antivirus DNS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 1 14.2 ZeroCERT

40647 2021-10-14 16:47 1.dll  

a3dfaa6badd480c93af825510e7cd1d2


UPX Malicious Library PE64 PE File OS Processor Check DLL VirusTotal Malware Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check crashed 		2.6 8 ZeroCERT

40648 2021-10-14 16:45 Advice from Standard Chartered...  

57b0ad14b76c30bdaef9b5c06028a746


RAT PWS .NET framework Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE Malware download Nanocore VirusTotal Malware c&c powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		3 2 14.2 20 ZeroCERT

40649 2021-10-14 16:45 Documents.lnk  

db8f42a798dd65d9bd8398c3e2564f06


Generic Malware AntiDebug AntiVM GIF Format VirusTotal Malware Code Injection Creates shortcut unpack itself crashed 		2.4 8 ZeroCERT

40650 2021-10-14 16:16 art-718184786.xls  

a9e51062b4512cfb98065c71ce7b2605


Downloader MSOffice File ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		4 8 4 4.8 guest

keyword