popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41401 2021-09-19 10:53 templezx.exe  

fbc43fdfa54c1ed1a41f4618d695e784


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 4 13.4 M ZeroCERT

41402 2021-09-19 10:52 vbc.exe  

2a59d2396654692dc87a81df7554b608


Malicious Library PE File OS Processor Check PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself RCE DNS 		12 24 1 5.6 M 49 ZeroCERT

41403 2021-09-19 10:49 Stub.exe  

5eaf5e0662c263dd7acc3476067991a2


RAT PWS .NET framework Gen2 Generic Malware Malicious Packer Malicious Library PE64 PE File OS Processor Check .NET EXE DLL VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS 		4 5 2 4 9.0 M 36 ZeroCERT

41404 2021-09-19 10:49 Stub.exe  

5eaf5e0662c263dd7acc3476067991a2


RAT PWS .NET framework NPKI Gen2 Generic Malware Malicious Packer Malicious Library PE64 PE File OS Processor Check .NET EXE DLL VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS 		4 4 2 4 8.4 M 36 ZeroCERT

41405 2021-09-19 10:47 vbc.exe  

866d1aeb69daac5e6e4dda938edf8d26


Malicious Library PE File OS Processor Check PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself RCE 		14 27 1 4.0 M 49 ZeroCERT

41406 2021-09-19 10:46 mygod.exe  

60a01c98200c36b4917c453feedbf79d


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		10.4 M 40 ZeroCERT

41407 2021-09-19 10:44 cyber-server.exe  

6d4254084c9aff0d20d9c1cdfb7a31ec


RAT PWS .NET framework Generic Malware Malicious Packer PE File .NET EXE PE32 VirusTotal Malware ICMP traffic IP Check DNS 		1 3 1 4.4 M 61 ZeroCERT

41408 2021-09-19 10:44 vbc.exe  

3cb12929c01dcbf5af156b6ce3fa3a6f


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 3 7 1 13.4 M 19 ZeroCERT

41409 2021-09-19 10:42 0d.exe  

3a2984391e5a67689e60830f82700e74


RAT Generic Malware ScreenShot Http API Steal credential AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 3 1 10.2 12 ZeroCERT

41410 2021-09-19 10:42 Kdkvxufvvymmebagxmoolsfkmwkkqa...  

663dfa8f055ba37eaa8bffc10026f311


UPX Malicious Library PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee RCE crashed 		1 2 1 2.8 M 26 ZeroCERT

41411 2021-09-18 22:10 11 billentyűkombináció, ami me...  

536838e1ba71280e538c83079e48495a


PDF 		guest

41412 2021-09-18 22:04 11 billentyűkombináció, ami me...  

536838e1ba71280e538c83079e48495a


PDF 		guest

41413 2021-09-18 21:40 Japán vízkúra.pdf.igvm  

c27de5e6764d3f0cbce3dae0117a66f6


PDF 		guest

41414 2021-09-18 20:02 troupzx.exe  

1c4fd4c1adfb8b5cc412128415251379


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 M 25 ZeroCERT

41415 2021-09-18 20:02 askinstall58.exe  

75cd00f5ec5aa1120739721c6f0a1240


Gen2 Trojan_PWS_Stealer NPKI BitCoin Credential User Data Generic Malware Malicious Packer Malicious Library SQLite Cookie UPX Anti_VM DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenSh Browser Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName RCE crashed 		4 8 1 2 10.6 M ZeroCERT

keyword