popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41266 2021-09-23 08:44 obizx.exe  

9e3d48d47e6370c4cd6ca03ef3c58cd5


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.8 M 23 ZeroCERT

41267 2021-09-23 08:43 vbc.exe  

7a23da05dfbd236cb33b6d7a2a1f262d


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		8 17 3 8.8 M 22 ZeroCERT

41268 2021-09-23 08:40 princezx.exe  

b80aee6108833308db15c2b4dda4a3de


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		10.6 M 21 ZeroCERT

41269 2021-09-23 08:38 okito.exe  

ee63641e45cd39a27512828a6d5de7b3


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		13.4 M 27 ZeroCERT

41270 2021-09-23 08:35 .winlogon.exe  

a6b0ff3aaa1b4989b5814c6c179679dd


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.8 27 ZeroCERT

41271 2021-09-23 08:33 msmsmsmsm.exe  

f1605eda6ee89c9d60fc6f3ce0d91724


RAT Generic Malware Malicious Packer UPX AntiDebug AntiVM PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		2 11.6 M 42 ZeroCERT

41272 2021-09-23 08:32 rundll32.exe  

c40d259a0b4e4747b0f621a68fc6c1e7


PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 23 ZeroCERT

41273 2021-09-23 08:31 file6.exe  

a92ecf7fef1451c1ebd6f7886a9e22d5


PE File PE32 VirusTotal Malware Malicious Traffic unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Tofsee Windows Firmware crashed 		1 2 1 6.8 M 31 ZeroCERT

41274 2021-09-23 08:30 DownFlSetup999.exe  

ecb887b80ecdd78f0d5c3d93e77fe21c


RAT Generic Malware Themida Packer Anti_VM Malicious Library PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder suspicious TLD VMware anti-virtualization installed browsers check Tofsee Ransomware Windows Browser Email ComputerName Firmware DNS Cryptographic key Software crashed 		9 11 2 15.4 M 32 ZeroCERT

41275 2021-09-23 08:29 effot.exe  

2aea6536bef3a2c24c770a59b9ee696f


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		11.8 M ZeroCERT

41276 2021-09-23 08:27 24.exe  

8db72b47d0e9b71bd08f6adf47818291


Lazarus Family Generic Malware Themida Packer Anti_VM Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware Cryptographic key crashed 		3 7.4 M 25 ZeroCERT

41277 2021-09-23 08:27 loader3.exe  

aa53fa17f4a2fbed593979efd1c41a17


NSIS Malicious Library PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 9.8 M 32 ZeroCERT

41278 2021-09-23 08:25 vbc.exe  

23435288fa91ce5561bdc28531154c07


PWS Loki[b] Loki.m .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.6 M 27 ZeroCERT

41279 2021-09-23 08:25 vbc.exe  

014c2e92efa4666879aa2bfae030be10


Loki PWS Loki[b] Loki.m .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 13.0 M 25 ZeroCERT

41280 2021-09-22 22:45 rgo.exe  

c4f267cb881e0a7f999b3e639772b351


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.4 M 34 ZeroCERT

keyword