popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41341 2021-09-20 21:02 0bd168703d2bb6a6d5fffe115c4834...  

3eb2ea9527590196759a92fdd24eaf8b


Gen2 Emotet Gen1 Generic Malware Malicious Packer Malicious Library MSOffice File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Tofsee ComputerName DNS DDNS 		3 2 2.8 18 guest

41342 2021-09-20 20:36 1ade2bf9e1a716a8135883046afa00...  

1734f4013eebe0f6390d89a202af8942


Gen2 MSOffice File VirusTotal Malware 		0.8 24 guest

41343 2021-09-20 10:19 VideoRecoderDriveMaster.exe  

89059c81d1e7400ddfb518e9c7fa026b


Themida Packer Malicious Packer PE64 PE File VirusTotal Malware Windows crashed 		2.2 28 ZeroCERT

41344 2021-09-20 10:16 40.exe  

904b66229f5d7a3f7e55099b973416b6


Malicious Library UPX Admin Tool (Sysinternals etc ...) DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PE File VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger WMI unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS 		1 7.0 27 ZeroCERT

41345 2021-09-20 10:16 PhoenixMiner.exe  

33b49643272dc9044096dc01c71213b6


Generic Malware Malicious Packer UPX Malicious Library PE64 PE File OS Processor Check MSOffice File VirusTotal Malware 		1.6 35 ZeroCERT

41346 2021-09-20 10:10 Stub1.exe  

81b5f1e1a01a892296aab30a2e83cf2f


RAT PWS .NET framework Gen2 Generic Malware Anti_VM Malicious Packer Malicious Library PE64 PE File OS Processor Check .NET EXE DLL VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS 		4 4 2 4 8.2 M 22 ZeroCERT

41347 2021-09-20 09:58 njbypass.txt.ps1  

719f2de7ca5a43ef68f0edbbd432aa51


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.4 M 5 ZeroCERT

41348 2021-09-20 09:58 bypass.txt.ps1  

beb711d4f12cbe69eab1fdf6757374a0


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 13 ZeroCERT

41349 2021-09-20 09:53 askinstall5.exe  

61e0ed3cd468c91cd0641939a519c720


Gen2 Trojan_PWS_Stealer Emotet RAT NPKI Credential User Data Generic Malware Malicious Packer Malicious Library SQLite Cookie Admin Tool (Sysinternals etc ...) Anti_VM ASPack UPX Antivirus PE File OS Processor Check PE32 ELF PNG Format PE64 DLL MSOffice Browser Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files ICMP traffic exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName RCE crashed 		4 8 1 2 10.6 M ZeroCERT

41350 2021-09-20 09:50 14.exe  

25b544886f92efc35d16afae0ccbe885


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.4 M 37 ZeroCERT

41351 2021-09-20 09:47 Updbdate.exe  

7adeb7b9a3dbc0de7fdb92c72bdb0745


Malicious Library PE File PE32 PDB unpack itself 		1.0 M ZeroCERT

41352 2021-09-20 09:45 76.exe  

cbf7ac18207051de82560b4621f7905f


Emotet RAT Gen1 UPX Malicious Library PE File PE32 PE64 DLL OS Processor Check Malware download VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder crashed 		1 2 1 3.8 M 5 ZeroCERT

41353 2021-09-20 09:45 Mortician.exe  

2744d06ccec54b48efc46c31a4260dbe


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 9.2 M 45 ZeroCERT

41354 2021-09-20 09:44 Stubchik.exe  

d5d4f07e59ffad621f322b68c12e411e


RAT Generic Malware Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 PE64 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName DNS crashed 		4 5 4 2 12.6 M 29 ZeroCERT

41355 2021-09-20 09:43 customer2.exe  

dc70792e3bec9dbfd00abcceee8d849e


ASPack Malicious Library PE64 PE File OS Processor Check Browser Info Stealer Malware PDB Malicious Traffic Check memory Check virtual network interfaces IP Check Browser RCE 		3 4 1 2 3.2 M ZeroCERT

keyword