popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41791 2021-09-07 15:06 blackmatter.exe  

18c7c940bc6a4e778fbdf4a3e28151a8


BlackMatter Ransomware PE File PE32 VirusTotal Malware MachineGuid Check memory unpack itself AntiVM_Disk VM Disk Size Check Ransomware ComputerName 		2 7.6 53 r0d

41792 2021-09-07 15:03 charles.html  

da1721b1e3a188310ec7e7b2520213c3


Antivirus AntiDebug AntiVM PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		31 16 2 4.2 ZeroCERT

41793 2021-09-07 14:59 faster4upusa.exe  

9eff1fa203474d2c90d490415fd380c9


PE File PE64 VirusTotal Malware crashed 		1.4 M 13 r0d

41794 2021-09-07 14:38 Purchase Inquiry.ppt  

72fbb1892420f4727710ea0f7a324834


Generic Malware VBA_macro MSOffice File VirusTotal Malware RWX flags setting unpack itself Tofsee 		1 2 1 1.6 26 ZeroCERT

41795 2021-09-07 12:21 3cc0e0be954dc849581f9ff1817647...  

adfe31c40569ca5b0b403f0ba3f7b24c


Gen2 Gen1 Generic Malware Malicious Library PE File OS Processor Check PE32 DLL VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion IP Check ComputerName 		3 9 1 1 8.4 M 51 ZeroCERT

41796 2021-09-07 12:02 SmartPDF.exe  

5578b9ee762d52576c11b01f004fc6ad


Gen2 RAT Emotet Gen1 Generic Malware UPX Malicious Library Malicious Packer Antivirus PE File PE32 OS Processor Check DLL .NET EXE PE64 MSOffice File VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW IP Check VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName Amazon DNS 		14 33 8 2 14.6 M 22 ZeroCERT

41797 2021-09-07 12:01 wef.exe  

9008f0b5ea0867bbeda8161d183e7a3d


RAT PWS .NET framework Generic Malware Malicious Library PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself DNS 		5 4.4 M 50 ZeroCERT

41798 2021-09-07 12:00 proliv6.exe  

ef5b5d09bfd51074604ec0c622ad7052


Generic Malware Themida Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		1 3 1 9.8 M ZeroCERT

41799 2021-09-07 11:57 ojbabas.exe  

04980596d66951166fa2ebfd96c84d22


PE File OS Processor Check PE32 VirusTotal Malware unpack itself Tofsee crashed 		1 2 2 1.4 M 26 ZeroCERT

41800 2021-09-07 11:57 clr.exe  

be8b9976bbf090bc23facc50a90273d6


NPKI Generic Malware UPX Malicious Library Malicious Packer PE File PE64 VirusTotal Malware unpack itself DNS 		4 2.6 28 ZeroCERT

41801 2021-09-07 11:45 frundll32.exe  

0425240f08e4a9d06e77a32f3f3b4ab7


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW Tofsee ComputerName 		2 1 3.8 M 18 ZeroCERT

41802 2021-09-07 11:44 kayzx.exe  

a23fe7df14ede5c0b9f51cbd58bcd27b


Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		4.6 M 18 ZeroCERT

41803 2021-09-07 11:42 1.html  

b158eeca25cafb1c4f708acc3a3e4124


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 M ZeroCERT

41804 2021-09-07 11:42 1.html  

7546581523b86a9d2b4e60254573e57c


AntiDebug AntiVM Code Injection RWX flags setting unpack itself Windows utilities Windows 		2.2 M ZeroCERT

41805 2021-09-07 11:20 reestr.exe  

e369a4ae59ce3b82b5ed8054f0597341


Malicious Packer PE File PE32 VirusTotal Malware 		2.2 M 48 r0d

keyword