popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41881 2021-09-04 14:12 beacon.exe  

8d8d168e25d41e2d4304c08cb3105d9b


Malicious Library PE File PE32 Dridex TrickBot VirusTotal Malware RWX flags setting unpack itself Kovter ComputerName RCE DNS 		1 3 3.2 M 57 ZeroCERT

41882 2021-09-04 14:11 vbc.exe  

e2e2b1bd1df8d460c9b1d11097429d16


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 48 ZeroCERT

41883 2021-09-04 14:09 PBrowFile17.exe  

8e2c6bd0f789c514be09799fa453f9bb


Generic Malware PE File .NET EXE PE32 VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee 		2 5 1 2 4.4 M 47 ZeroCERT

41884 2021-09-04 14:09 PBrowFile16.exe  

915fff94ba8a7588af46c1090b7cd6d9


NPKI Generic Malware PE File .NET EXE PE32 VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee 		2 5 1 4.4 M 46 ZeroCERT

41885 2021-09-04 14:08 vbc.exe  

c13976b4653ada57f5b39e16a793e99f


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed 		9 18 1 8.2 36 ZeroCERT

41886 2021-09-04 14:07 pcpedemo.exe  

250e548c641a259913efe572efa37914


Emotet Generic Malware NSIS Malicious Library PE File OS Processor Check PE32 VirusTotal Malware Check memory Checks debugger Creates executable files RWX flags setting unpack itself AppData folder 		4.0 16 ZeroCERT

41887 2021-09-04 14:05 skype.exe  

7cdbaac6ce5de3023ac8b8ebf17cbb1f


PWS .NET framework email stealer Generic Malware DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key crashed 		1 11.8 31 ZeroCERT

41888 2021-09-04 14:05 obinnazx.exe  

5b5276e6117204297cf817fee27e16d4


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows Cryptographic key 		1 4 1 11.6 M 30 ZeroCERT

41889 2021-09-04 14:03 Soft-win.exe  

4e120e201ef1e0c75a923215aa66e07b


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.2 M 34 ZeroCERT

41890 2021-09-04 14:02 Real01_1.exe  

5cde4a5c2fad12bc819ccc89b6baae53


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.6 M 41 ZeroCERT

41891 2021-09-04 14:02 rp1.exe  

7dd46656a988d8b05cf41486ff90e6aa


Emotet Generic Malware Themida Packer Malicious Library PE File .NET EXE PE32 GIF Format Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		4 9 2 14.4 M 16 ZeroCERT

41892 2021-09-04 14:00 syn  

9eb8c2ce21be0b6f778806b9875f1368


Malicious Library AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware Code Injection Check memory Checks debugger unpack itself Browser Email 		4.0 M 37 ZeroCERT

41893 2021-09-04 13:58 PBrowFile15.exe  

0dd588d0d11074ff583db120b6c551a4


Generic Malware PE File .NET EXE PE32 VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee 		2 5 1 4.4 M 43 ZeroCERT

41894 2021-09-04 13:58 build_2021-09-03_19-07.exe  

34d8bda29d961c5757f3a8a0ef971205


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.2 M 36 ZeroCERT

41895 2021-09-04 13:58 fit.exe  

3386ae032f6d373ca53c4cdd9f2d8071


Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		3 6 1 11.6 M 21 ZeroCERT

keyword