popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41446 2021-09-17 10:00 ftp.exe  

6e50112832160134bc11782d9fe9cadc


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.4 M 41 ZeroCERT

41447 2021-09-17 09:59 MVTT.exe  

7bc69f6fac0d853781b1a72cba8c770f


Generic Malware Antivirus PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process AppData folder Windows ComputerName Cryptographic key 		6.0 M 52 ZeroCERT

41448 2021-09-17 09:57 .audiodg.exe  

b89f8038f53ffc8982d8e25a420dd29e


PWS Loki[b] Loki.m .NET framework Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software crashed 		1 2 6 1 13.4 M 24 ZeroCERT

41449 2021-09-17 09:56 vbc.exe  

be72c9c102de48a6b9158380af41e609


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 M 45 ZeroCERT

41450 2021-09-17 09:54 invoice.wbk  

dba69da87a497561022dff1ec7b1631c


Lokibot RTF File doc AntiDebug AntiVM LokiBot Malware download VirusTotal Malware c&c MachineGuid Malicious Traffic Check memory exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 3 13 1 5.2 M 25 ZeroCERT

41451 2021-09-17 09:54 lmao.exe  

f8fdcd124427dfb121cc885083977607


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		2 1 3.0 M 41 ZeroCERT

41452 2021-09-17 09:53 VHGVC-4.exe  

422280cacdf29241ea5342cbf43721d5


PWS .NET framework Generic Malware Antivirus PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key crashed 		2 8.6 M 53 ZeroCERT

41453 2021-09-17 09:52 dsf.wbk  

b173278a101f7c26ea90d923613fcbba


Lokibot RTF File doc AntiDebug AntiVM LokiBot Malware download VirusTotal Malware c&c MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS Cryptographic key crashed Downloader 		2 3 13 1 5.6 M 26 ZeroCERT

41454 2021-09-17 09:51 Anye.exe  

16e153201be41825d56aaeac47183efd


Gen1 UPX Admin Tool (Sysinternals etc ...) Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiV Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory buffers extracted WMI Creates executable files RWX flags setting unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee OskiStealer Stealer Windows Browser Email ComputerName RCE DNS crashed Password 		10 3 6 18.0 M 23 ZeroCERT

41455 2021-09-17 09:50 vbc.exe  

50f9407000cb612b401aaddd94cfda0b


Loki PWS Loki[b] Loki.m .NET framework Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 1 11.8 M ZeroCERT

41456 2021-09-17 09:47 SJFIIEESD-6.exe  

efa7b4d2183d6e526cf2b9bc57e4fda5


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces suspicious TLD Tofsee DNS 		2 2 4.0 M 48 ZeroCERT

41457 2021-09-17 09:47 11.html  

f0afc8b55366e5ef6483bfb76429b44b


Antivirus AntiDebug AntiVM MSOffice File PNG Format Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		22 16 2 4.2 ZeroCERT

41458 2021-09-17 09:47 aje.exe  

e4ddcfa1589fd52face01d5c9d76a527


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 M 24 ZeroCERT

41459 2021-09-17 09:45 vbc.exe  

7789bd4d79ad897126a68bf3e74f4e1b


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.4 M 47 ZeroCERT

41460 2021-09-17 09:25 Проверка Сотрудников.docx...  

41dacae2a33ee717abcc8011b705f2cb


Word 2007 file format(docx) VirusTotal Malware MachineGuid Check memory RWX flags setting unpack itself GameoverP2P Zeus ComputerName Trojan Banking 		1 1 4.6 10 ZeroCERT

keyword