popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42136 2021-08-27 15:49 Sensys_DSign_FY_2021_2022Setup...  

b919eae6a85535797d58048b45c8df00


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB Check memory RWX flags setting unpack itself RCE 		2.2 M 13 ZeroCERT

42137 2021-08-27 15:48 Sonytec.exe  

9f131b2c9238dec27437d330d4b2b872


RAT Generic Malware Antivirus KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Check virtual network interfaces suspicious process AppData folder sandbox evasion VMware anti-virtualization IP Check installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		5 8 5 25.8 M 11 ZeroCERT

42138 2021-08-27 15:47 vbc.exe  

97c2aecf2380200fc50b84d72af34480


Generic Malware UPX PE File PE32 VirusTotal Malware Check memory Checks debugger buffers extracted ICMP traffic unpack itself Tofsee DNS 		1 6 1 5.4 M 14 ZeroCERT

42139 2021-08-27 15:46 resizebar.png  

b4e0bc4b97c1ff7dc3964293fd10fa5a


Emotet Malicious Library AntiDebug AntiVM PE File PE32 Dridex TrickBot Malware suspicious privilege Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		11 9 4 10.2 ZeroCERT

42140 2021-08-27 15:45 Adobe-GenP-2.7.exe  

6467e9dd5d86c741aed49060e6d3fcd2


Malicious Library PE File PE64 OS Processor Check VirusTotal Malware Report Check memory Checks debugger unpack itself sandbox evasion human activity check DNS 		3 1 3.0 1 ZeroCERT

42141 2021-08-27 15:44 tooltipred.png  

4f907ddbf3e599e3d4f6687dcf69e747


Emotet Malicious Library AntiDebug AntiVM PE File PE32 Dridex TrickBot Malware Report suspicious privilege Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		12 8 5 10.2 ZeroCERT

42142 2021-08-27 15:42 build_2021-08-25_11-30.exe  

b27c38cb9a8a55bf5f24051bf8c39e91


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.4 M 24 ZeroCERT

42143 2021-08-27 15:42 bigshoezx.exe  

61e17d354f8529a203207e491cab779e


RAT PWS .NET framework Generic Malware Malicious Packer Malicious Library SSL DNS Socket SMTP Escalate priviledges KeyLogger Internet API ScreenShot Dynamic Dns persistence AntiDebug AntiVM PE File .NET EXE PE32 JPEG Format DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder malicious URLs IP Check Tofsee Windows Browser Advertising Google Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		7 18 8 21.6 M 31 ZeroCERT

42144 2021-08-27 15:40 file9.exe  

397081993526f201da9b0045b6cb6736


Generic Malware Themida Packer PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		1 3 1 10.0 M 23 ZeroCERT

42145 2021-08-27 15:38 shef1.exe  

842124b4ed12ad2f1bddb4360d69fdbb


Lazarus Family Generic Malware Themida Packer Anti_VM Malicious Library PE File .NET EXE PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Tofsee Windows ComputerName Firmware DNS Cryptographic key crashed 		1 3 1 9.8 M 40 ZeroCERT

42146 2021-08-27 15:38 playstore.apk  

f85f6697dbc42c8cb034716dccfe1371

VirusTotal Malware 		0.6 M 19 ZeroCERT

42147 2021-08-27 15:36 petrols.exe  

95a5feae6a76ea65d0c9fe06053788b5


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 12.2 M 27 ZeroCERT

42148 2021-08-27 15:36 ETC.exe  

01b6e15274bdff55dd725ed01ad2ba23


RAT Generic Malware Antivirus Malicious Packer PE File PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.2 M 35 ZeroCERT

42149 2021-08-27 15:34 XMR.exe  

0f23f1451e66b86bc3e56dbb714da989


RAT Generic Malware Antivirus Malicious Packer PE File PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.4 M 43 ZeroCERT

42150 2021-08-27 15:34 petrol.exe  

700a021908885c05ef227a55452d9ffe


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName crashed 		10.8 M ZeroCERT

keyword