popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41281 2021-09-22 22:42 download.php  

f00246dd362f2c57a69b82099bf4e4ea


VirusTotal Malware 		0.8 M 25 ZeroCERT

41282 2021-09-22 22:41 softedont.exe  

271dd1b7b71a59842bac41e1be96b697


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE DNS 		1 3.0 M 52 ZeroCERT

41283 2021-09-22 22:40 243234193.exe  

358af97491dd7d9191744789b0f9e87f


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 8.0 M 41 ZeroCERT

41284 2021-09-22 22:38 PBrowFile11.exe  

4a0f9d7e858b278ed038fc3b303d61f7


RAT Generic Malware Malicious Packer PE File OS Processor Check .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself 		2.6 M 19 ZeroCERT

41285 2021-09-22 22:38 vbc.exe  

d362ffc6b594c617852f20b87ab4bbef


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		8 17 1 9.4 M 44 ZeroCERT

41286 2021-09-22 22:36 buildcpils.exe  

26b9716419a2eac7f4b367e6cc06a946


RAT Generic Malware PE64 PE File OS Processor Check PNG Format VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS 		3 2 7.2 M 17 ZeroCERT

41287 2021-09-22 22:35 new.exe  

e1c271fec5a9b690482b700d4ed8316b


PWS Loki[b] Loki.m Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 13.8 M 24 ZeroCERT

41288 2021-09-22 22:34 PublicDwlBrowser1100.exe  

94c17903ebb08d6e352dccce353d95d4


RAT Generic Malware Malicious Packer PE File .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself 		2.8 M 20 ZeroCERT

41289 2021-09-22 22:33 21061736.exe  

24a83981517c299c8b10b9dd5ca2620f


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 8.6 M 50 ZeroCERT

41290 2021-09-22 22:32 18.exe  

5389b036dc60417f5d0df36e82131b63


Gen1 Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 OS Processor Check DLL Browser Info Stealer Malware download VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Stealer Windows Browser Email ComputerName DNS 		8 1 4 11.2 M 19 ZeroCERT

41291 2021-09-22 22:32 vbc.exe  

f865e60134bf6774d24e03d2907c9791


PWS Loki[b] Loki.m .NET framework Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 3 7 12.4 ZeroCERT

41292 2021-09-22 22:30 10.exe  

29f6d019b55cd3ab946ca70651a2bd8c


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 PE64 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		4 8 4 15.6 M 30 ZeroCERT

41293 2021-09-22 22:29 863387648.exe  

8df6d5b6ce4864ae629684b7566ebaa7


RAT Generic Malware Malicious Packer Antivirus PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 48 ZeroCERT

41294 2021-09-22 22:28 WORD.exe  

a2f81b2021d159eaf2c7bcac2dfbeacb


RAT Generic Malware Antivirus DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW human activity check Tofsee Windows ComputerName DNS Cryptographic key DDNS crashed 		1 5 2 17.4 M 23 ZeroCERT

41295 2021-09-22 22:27 navitas_employee_survey.hta  

537363b3738a8e0726ae15e6bc4fc314

VirusTotal Malware Check memory unpack itself 		2 2 1.8 M 25 ZeroCERT

keyword