popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42121 2021-08-28 02:59 bear.jpg.exe  

1d9dcacc61aaacca64e3776e9bb06e94


Generic Malware UPX Antivirus PE File PE32 VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 9.0 M 55 guest

42122 2021-08-27 17:35 .svchost.exe  

2644b63346379dd60b63309ff086eeef


Generic Malware UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself RCE 		2.0 M 30 r0d

42123 2021-08-27 16:10 Hidden.exe  

a49b49fc0253c0dbbbd17e42bfbe9df6


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces IP Check installed browsers check Windows Browser ComputerName DNS DDNS crashed 		1 4 2 11.8 M 28 ZeroCERT

42124 2021-08-27 16:08 vbc.exe  

47fa27443cb1abe987ca9f653754b6d0


Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName DNS 		17 21 3 13.4 M 39 ZeroCERT

42125 2021-08-27 16:07 Async.exe  

cfd0d3019414ab97ca0501e683121468


RAT PWS .NET framework Generic Malware Malicious Packer Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE Dridex TrickBot VirusTotal Malware AutoRuns Code Injection Windows utilities suspicious process AppData folder WriteConsoleW Kovter Windows ComputerName DNS DDNS 		2 2 5.2 M 45 ZeroCERT

42126 2021-08-27 16:03 XssVEsUTA4UMkp4.exe  

4adabacc6bf40958b67967c7af0e3491


RAT PWS .NET framework Generic Malware PSW Bot LokiBot ZeusBot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware IoC AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key 		3 3 2 14.8 M 19 ZeroCERT

42127 2021-08-27 16:01 Ne82jq7vKJ7NcDn.exe  

7852a7b27bdb9d5120ca3fa917d7f9ca


RAT PWS .NET framework Generic Malware PSW Bot LokiBot ZeusBot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key 		3 2 2 13.8 M 27 ZeroCERT

42128 2021-08-27 15:58 vbc.exe  

7c1876b8b71c72e8e9fb2fd494020c67


Generic Malware UPX PE File PE32 VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself Tofsee 		2 2 3.4 M 39 ZeroCERT

42129 2021-08-27 15:57 odinakazx.exe  

8e6f8cd375efaba9d88c2930af3dc10e


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		10 22 2 8.0 M 35 ZeroCERT

42130 2021-08-27 15:57 .svchost.exe  

2644b63346379dd60b63309ff086eeef


UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself RCE 		2.0 M 30 ZeroCERT

42131 2021-08-27 15:54 nputty.exe  

1b726484bea3d11852e96ef2494cce24


Generic Malware Malicious Packer PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself human activity check Windows ComputerName DNS DDNS 		4 1 9.0 M 53 ZeroCERT

42132 2021-08-27 15:53 0fd9ce44914b3beda3c86ba2163945...  

6d3d857dce2ce88c250574619f6a2f0a


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.8 M 41 ZeroCERT

42133 2021-08-27 15:52 DC.exe  

eb847438f988c2a2d52bcf0f0b439980


RAT PWS .NET framework Generic Malware Antivirus Malicious Packer Malicious Library PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 3.6 M 43 ZeroCERT

42134 2021-08-27 15:51 mixer.exe  

63b84dcd1b3804bcb9daeca03e14bfc6


Generic Malware Themida Packer PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		1 4 1 10.0 M 21 ZeroCERT

42135 2021-08-27 15:50 NvidiaShare1.exe  

814f22a67e6d2046f532f973f197c649


RAT PWS .NET framework Generic Malware DGA DNS Socket Create Service SMTP Sniff Audio Escalate priviledges KeyLogger Code injection Internet API ScreenShot Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself malicious URLs Tofsee BitRAT Windows ComputerName DNS Cryptographic key crashed keylogger 		1 5 2 13.0 M 20 ZeroCERT

keyword