popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41386 2021-09-19 11:28 xmrig.exe  

4f5bbe6b657b6f5874e99baf62af5555


PE64 PE File VirusTotal Malware Checks Bios anti-virtualization crashed 		2.4 32 ZeroCERT

41387 2021-09-19 11:28 ZZZZZ.exe  

2d42f56f58a4c19df022913160949c76


RAT Generic Malware Themida Packer Malicious Packer PE File PE32 OS Processor Check .NET EXE PE64 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key crashed 		5 6 8 2 12.4 M 28 ZeroCERT

41388 2021-09-19 11:26 System64.exe  

a2968300e88e5c7f392ea704e39ff9b4


Gen2 RAT Gen1 PWS .NET framework Generic Malware Malicious Packer Antivirus Malicious Library PE64 PE File OS Processor Check .NET EXE VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Check memory Checks debugger unpack itself Auto service Windows ComputerName 		4.6 M 48 ZeroCERT

41389 2021-09-19 11:20 .svchost.exe  

a6288732dfc7779369a4712b345070fb


Generic Malware UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		1.8 M 35 ZeroCERT

41390 2021-09-19 11:17 xxxx1_2021-09-14_09-27.exe  

f343214355c07ba17b3726491847787a


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 47 ZeroCERT

41391 2021-09-19 11:15 753.exe  

af3e98549b975158f54ef8b171182d50


Admin Tool (Sysinternals etc ...) Malicious Library UPX AntiDebug AntiVM PE File PE32 PE64 Malware download VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Creates executable files Windows utilities suspicious process WriteConsoleW Windows DNS Downloader 		1 1 5 8.6 M 46 ZeroCERT

41392 2021-09-19 11:15 kok.exe  

2b0eb2dffd9788bfb9390e060f5e4bcc


PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 M 24 ZeroCERT

41393 2021-09-19 11:00 crock  

e74b2720eaf32bfc409eb52a3d5e937f


RAT Generic Malware Malicious Packer Antivirus PE64 PE File VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.6 M 40 ZeroCERT

41394 2021-09-19 11:00 CurrenyCalculatorInst.exe  

63fe4796434aad20a0ccbb0944ea0f02


Themida Packer Generic Malware Malicious Library Anti_VM Antivirus UPX Admin Tool (Sysinternals etc ...) DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Dow Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW VMware anti-virtualization installed browsers check Tofsee Windows Exploit Browser ComputerName Firmware DNS Cryptographic key Software crashed 		5 12 1 17.4 M 38 ZeroCERT

41395 2021-09-19 10:59 Tcx5xxXPl9GOucJ.exe  

04ecb65ad3407b89abab206a1b921e5c


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS crashed 		1 11.0 M 25 ZeroCERT

41396 2021-09-19 10:58 new.exe  

0fa96c805292abfab6d01768050a0d3c


RAT Generic Malware UPX AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName RCE DNS Cryptographic key Software crashed 		1 3 1 12.2 M ZeroCERT

41397 2021-09-19 10:58 vbc.exe  

de8a80136d8b6c2002ba8473bda2a617


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		26 28 2 5.2 M 28 ZeroCERT

41398 2021-09-19 10:56 vbc.exe  

66ce1420280eceebeab924165f28b7bb


PWS .NET framework Gen2 Emotet Gen1 Generic Malware NSIS Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) ASPack Anti_VM KeyLogger ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process AppData folder WriteConsoleW VMware anti-virtualization installed browsers check Windows Browser ComputerName DNS Software 		1 16.2 M 45 ZeroCERT

41399 2021-09-19 10:55 n.wbk  

f001c279ed34264cd5bd0acf4987cec1


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS Cryptographic key crashed Downloader 		3 6 5.2 M 24 ZeroCERT

41400 2021-09-19 10:53 terrin.exe  

4bcdcb852861a9d7f40a26bc825882b2


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 M 37 ZeroCERT

keyword