popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42001 2021-09-01 14:15 0831_4532643085.doc  

f25c56cf3b503d96df86b4bb2c39f479


Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 7.4 M guest

42002 2021-09-01 14:14 0831_4435052411.doc  

004b4634de3991a6de6a2c756a83e6ff


Generic Malware VBA_macro MSOffice File unpack itself 		1.6 guest

42003 2021-09-01 14:06 Scan HP Jet 371302-83.exe  

d703b3cc46820009bb6c4ab14666ea9e


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces human activity check Tofsee Windows DNS Cryptographic key DDNS crashed 		1 4 2 14.6 25 JYC

42004 2021-09-01 13:50 Scan HP Jet 371302-83.7z  

2c5b2473879d30de86142c75a96ce789


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		4.4 16 JYC

42005 2021-09-01 10:04 yui7653_pdf.exe  

734a89ad96b20660a5cc97dad178fdbc


AutoIt UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee DNS 		1 3 2 3.2 30 ZeroCERT

42006 2021-09-01 10:01 StaticArrayInitTypeSize52.exe  

69b982b35f003dc6e9ca1e4b5ace2274


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 5 12.6 28 ZeroCERT

42007 2021-09-01 10:00 JKd.txt.ps1  

72b9eedf6b1effb1f41c3ee79e89eb98


Generic Malware Antivirus Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.0 M ZeroCERT

42008 2021-09-01 09:50 vbc.exe  

04179ebbab706ca5b7d7eda0becd3abc


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		8 20 1 2 8.4 M 26 ZeroCERT

42009 2021-09-01 09:47 kelvinzx.exe  

bb1daddaf3592e05e82b0ab73e7ecd11


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 7.0 M 23 ZeroCERT

42010 2021-09-01 09:47 pattern.exe  

dcef208fcdac3345c6899a478d16980f


Emotet NPKI Gen2 Gen1 Formbook Generic Malware Malicious Packer Admin Tool (Sysinternals etc ...) Malicious Library Anti_VM ASPack PE File PE32 MSOffice File JPEG Format OS Processor Check DLL PNG Format Emotet VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Checks debugger WMI Creates executable files ICMP traffic unpack itself Windows utilities suspicious process WriteConsoleW shadowcopy delete Turn off Windows Error Recovery notification window IP Check Tofsee Ransomware Windows ComputerName crashed 		4 5 2 14.6 M 31 ZeroCERT

42011 2021-09-01 09:46 DOGGY.exe  

acbc7c1dedc73fdd72ccbaaca2318430


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows ComputerName Cryptographic key crashed 		2 4 10.2 M 26 ZeroCERT

42012 2021-09-01 09:43 rozezx.exe  

d9167b13f4f747f5e9b18a6688a7064e


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 5 13.0 M 31 ZeroCERT

42013 2021-09-01 09:41 binbobbyzx.exe  

63b4bbbb2c1b18487c673abcfcff9fff


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3 6 1 8.0 M 32 ZeroCERT

42014 2021-09-01 09:39 vbc.exe  

87c51ca97825602b25752753161f6ab4


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 5 1 10.0 M 18 ZeroCERT

42015 2021-09-01 09:39 system32.exe  

a5c58ba5c48f9cb8ab45cd5847a8cb08


RAT PWS .NET framework Generic Malware HTTP Internet API Http API Downloader AntiDebug AntiVM PE File .NET EXE PE32 GIF Format VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Tofsee Windows Browser Cryptographic key crashed 		2 4 2 11.8 M 25 ZeroCERT

keyword