popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41986 2021-09-02 09:23 mazx.exe  

2aee5ea79b9327ec85da89421b92d219


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		1 3 1 8.2 22 ZeroCERT

41987 2021-09-02 09:22 vbc.exe  

ceed79fe40c1038ca78784cc26a1eed5


RAT Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 1 10.2 M 18 ZeroCERT

41988 2021-09-02 09:21 nnlt4.exe  

d1ce5b7ddf8d49a2554281ffe4e14270


AgentTesla(IN) RAT Generic Malware Malicious Library Malicious Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		5.8 50 ZeroCERT

41989 2021-09-02 09:20 vbc.exe  

a9a4ef232a3238c20d7e392ca286c265


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		10 20 1 1 8.0 M 34 ZeroCERT

41990 2021-09-02 09:19 myformzx.exe  

caee75efc8bd1904d750d941d6a760b8


RAT PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 25 ZeroCERT

41991 2021-09-02 09:19 templefirstzx.exe  

6c0795e7a1460e3eb294d63e6961bd1c


RAT PWS .NET framework Formbook Generic Malware SSL DNS Socket SMTP Escalate priviledges KeyLogger Internet API ScreenShot Dynamic Dns persistence AntiDebug AntiVM PE File .NET EXE PE32 JPEG Format DLL FormBook Malware download VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself AppData folder malicious URLs Tofsee Windows Advertising Google ComputerName DNS Cryptographic key DDNS crashed keylogger 		11 26 6 2 15.4 M 23 ZeroCERT

41992 2021-09-02 09:19 ..-.-...................------...  

98a92918a128f1f26d552bb3aaab2a61


RTF File doc AntiDebug AntiVM FormBook Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS crashed Downloader 		19 16 8 6 5.4 M 26 ZeroCERT

41993 2021-09-02 09:17 bytes.dll  

0c6fec239a33864acdd558de506c1c3a


Generic Malware Malicious Packer PE File .NET DLL DLL PE32 VirusTotal Malware 		1.2 16 ZeroCERT

41994 2021-09-02 08:24 vbc.exe  

1cd98a8f7c1680578f5a0f097ca218da


Malicious Library PE File OS Processor Check PE32 unpack itself Tofsee 		1 2 2 0.6 M guest

41995 2021-09-02 08:02 vbc.exe  

1cd98a8f7c1680578f5a0f097ca218da


Malicious Library PE File OS Processor Check PE32 unpack itself Tofsee 		1 2 2 0.6 M ZeroCERT

41996 2021-09-02 07:54 invoice.wbk  

dd2f7b986cc840b4c4f9b03def8fcadd


RTF File doc AntiDebug AntiVM Malware download Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Tofsee Windows Exploit DNS Cryptographic key crashed Downloader 		1 3 8 4.4 ZeroCERT

41997 2021-09-02 07:52 tud.exe  

ce5d381161004cbbd80eaf1f37089cb2


Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		3 4 1 9.6 24 ZeroCERT

41998 2021-09-02 07:37 PAYLOAD2.PS1  

71af182d724fe991f4f3b4026fb7be66


Generic Malware Antivirus unpack itself 		0.4 ZeroCERT

41999 2021-09-01 17:55 swflash.cab  

b3e138191eeca0adcc05cb90bb4c76ff

 Kim.GS

42000 2021-09-01 14:18 0831_8300668682.doc  

25d3ac93606e135f18e4e96887fa3a44


hancitor Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 1 7.4 M guest

keyword