popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41701 2021-09-09 16:32 lv.exe  

b9424401181e75b5c4b5d418860d864e


Emotet NPKI Gen1 Gen2 Generic Malware Themida Packer Malicious Library Anti_VM UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal cred VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities AppData folder malicious URLs Windows crashed 		1 9.8 M 35 ZeroCERT

41702 2021-09-09 16:31 file.exe  

fd89d95093e3dbd5fd1a9ce4e9eec47a


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.2 M 34 ZeroCERT

41703 2021-09-09 12:49 0908_1433632206833.doc  

7be586e116427f79c0b9dc51d3f5419a


hancitor Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 1 7.2 M ZeroCERT

41704 2021-09-09 12:19 0908_4652590689245.doc  

512bf2e7c344b5b9dce4e0ad126b3445


Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 7.2 M guest

41705 2021-09-09 12:16 0908_3382318512000.doc  

985430bde7046f60da665fb65a15d5b5


Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces suspicious TLD IP Check ComputerName 		2 4 1 7.6 M guest

41706 2021-09-09 12:16 0908_1433632206833.doc  

7be586e116427f79c0b9dc51d3f5419a


Generic Malware VBA_macro MSOffice File unpack itself 		1.6 guest

41707 2021-09-09 12:13 360.exe  

4b6041ec1313e10979cbe1d154d87352


CoinMiner Generic Malware UPX PE File PE32 VirusTotal Malware AutoRuns Malicious Traffic Creates executable files unpack itself Windows RCE DNS 		1 1 2 6.0 M 53 r0d

41708 2021-09-09 09:56 linesloters.png  

4f2e675ac43f180075d9b1f3316486f8


Malicious Library AntiDebug AntiVM PE File OS Processor Check PE32 Dridex TrickBot Malware PDB suspicious privilege Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		7 4 4 8.6 M ZeroCERT

41709 2021-09-09 09:55 clip.exe  

cbdd7e3ccea8e6cfae0dddf8fe6f6599


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 21 ZeroCERT

41710 2021-09-09 09:53 sufile.exe  

f8a663ba086d55062bd727777b7cb02c


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.0 M 21 ZeroCERT

41711 2021-09-09 09:52 ipfile.exe  

3b1da65539de559464dce8e2e8074227


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 24 ZeroCERT

41712 2021-09-09 09:50 sefile2.exe  

3c933afc5af70a1c6330452b6f3f1f46


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.0 M 23 ZeroCERT

41713 2021-09-09 09:50 360.exe  

4b6041ec1313e10979cbe1d154d87352


PE File PE32 VirusTotal Malware AutoRuns Malicious Traffic Creates executable files unpack itself Windows RCE DNS 		1 1 2 6.0 M 53 ZeroCERT

41714 2021-09-09 09:21 okc.exe  

add9f6ce0fabf00a7b16911122e81f96


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows ComputerName Cryptographic key crashed 		2 4 10.6 M 42 ZeroCERT

41715 2021-09-09 09:18 whesilozx.exe  

0f48e15f12d8c4d49f456aae86f59c29


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.6 M 24 ZeroCERT

keyword