popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42166 2021-08-26 08:45 loader2.exe  

fbae05d8fbfbb56b2a96afabfcaab501


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee 		1 2 2 2.2 15 ZeroCERT

42167 2021-08-26 08:44 ppp.exe  

570a3dc73ebd68dab57a9e3212cb0641


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 11.8 M 32 ZeroCERT

42168 2021-08-26 08:42 dock.exe  

ba5199b37d013a27f8b20ae1d19545ab


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.8 M 27 ZeroCERT

42169 2021-08-26 08:41 heloo.exe  

a803d6ca253630ad1c7d2d23623ce731


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 11.6 M 27 ZeroCERT

42170 2021-08-26 08:38 vbc.exe  

c1e872d6aea9f4c23401047114261837


RAT Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 10.4 29 ZeroCERT

42171 2021-08-26 08:37 bill.exe  

27ee757d743631d49dcb3c6d7c90dfbe


Admin Tool (Sysinternals etc ...) Malicious Library PE File PE32 Emotet VirusTotal Malware Buffer PE Code Injection buffers extracted RWX flags setting unpack itself Tofsee 		3 4 1 5.6 18 ZeroCERT

42172 2021-08-26 08:35 Raz.exe  

c518288f75b3d5ee671193c32f88be3c


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces suspicious process WriteConsoleW ComputerName DNS 		11 23 1 12.0 16 ZeroCERT

42173 2021-08-26 08:33 vbc.exe  

7a2484277599f27801079f9bbda665c1


PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software crashed 		1 2 5 1 8.6 M 40 ZeroCERT

42174 2021-08-26 08:31 vbc.exe  

61d4b8cc54596921d5cbed6d4209377f


Generic Malware PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 5 1 9.0 M 46 ZeroCERT

42175 2021-08-26 08:30 ZXCXZCsssssssssssASDFasdfEWSDF...  

ca8ed36764b826bde1321643b68f439f


RAT Generic Malware DNS Socket Create Service BitCoin Escalate priviledges KeyLogger Code injection ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 PE64 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName Firmware 		2 12.0 34 ZeroCERT

42176 2021-08-26 08:29 svchost.exe  

483289c26f2b9e864a886572aea47f0c


RAT Generic Malware Malicious Library PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 49 ZeroCERT

42177 2021-08-26 05:53 http://equusrunvineyards.com/I...  

2d7eff43e6fe7e7b4985625183560f69


DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PNG Format MSOffice File JPEG Format VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 4 4.6 50 guest

42178 2021-08-25 23:00 vbc.bin  

24c4788a737cda143d0edac9c711994d


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee 		1 2 2 2.2 17 guest

42179 2021-08-25 11:08 mmserv32.exe  

e0ef479792b1fbbea0b7504a910e186d


RAT Generic Malware Antivirus Malicious Packer PE File PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.0 21 ZeroCERT

42180 2021-08-25 10:50 0824_5462188871.doc  

5c30204489626cb763f29c04e82f9e74


Generic Malware VBA_macro MSOffice File unpack itself 		1.6 guest

keyword