popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42181 2021-08-25 10:50 0824_2382378251.doc  

7a8e664b6f6c528baeb7535fd67e266d


Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		1 4 1 7.2 M guest

42182 2021-08-25 10:23 safman_setup.exe  

72bbac2c87dff558073e6306f1552a39


RAT Gen1 Malicious Library UPX PE File PE32 OS Processor Check PE64 VirusTotal Malware Check memory Checks debugger unpack itself AppData folder AntiVM_Disk VM Disk Size Check 		2.8 13 ZeroCERT

42183 2021-08-25 10:20 BIN.exe  

5d4344f2c377b22297ddeb0c98fa3e4b


RAT Generic Malware Admin Tool (Sysinternals etc ...) Anti_VM AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		8 18 1 1 10.6 M 39 ZeroCERT

42184 2021-08-25 10:18 lv.exe  

fdb87cedd4a67744dbd55009c66d010c


Emotet Gen1 NPKI Gen2 Generic Malware Malicious Library UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P p VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 6.4 M 33 ZeroCERT

42185 2021-08-25 10:15 6cd26f8134bcddd31b61ed0a7.exe  

addf66c224aff122d02e27adb6f5830b


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.2 M 36 ZeroCERT

42186 2021-08-25 10:13 1.jpg  

ce84ceaeaf1cc750e79d1ce57c439639

VirusTotal Malware 		0.4 4 ZeroCERT

42187 2021-08-25 10:13 2.jpg  

f02159415aeb4025c8a7c5ca93d7cb8e

VirusTotal Malware 		0.4 4 ZeroCERT

42188 2021-08-25 10:11 4.jpg  

a47b5b874c854d84c5b7da81a06ae211


Antivirus VirusTotal Malware DNS 		1 1 1.2 11 ZeroCERT

42189 2021-08-25 10:11 file.exe  

03903dd6bc470a44ed1cb27e4e965854


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.0 M 27 ZeroCERT

42190 2021-08-25 10:09 vbc.exe  

d48fbec5c6a2edf4893023951dd6c021


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		6 17 2 11.4 ZeroCERT

42191 2021-08-25 10:09 lv.exe  

f1b4d4902447ce5caab448a1ceea1279


Gen1 Gen2 Themida Packer Generic Malware Malicious Library Malicious Packer PE File PE32 GIF Format DLL OS Processor Check VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VMWare AppData folder AntiVM_Disk VMware anti-virtualization VM Disk Size Check human activity check Windows ComputerName Firmware crashed 		1 9.4 M 32 ZeroCERT

42192 2021-08-25 10:01 vbc.exe  

5ba5c0d5ca760b500600849aad55ffec


Generic Malware PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 5 1 8.2 M 26 r0d

42193 2021-08-25 09:58 can.exe  

941ffbcc54a5826dde6e2d35f2fc761d


Generic Malware PE File PE32 VirusTotal Malware WMI RWX flags setting unpack itself ComputerName crashed 		3.2 M 19 r0d

42194 2021-08-25 09:23 arasholit.exe  

353ad3cb7e6b9237e7e7bb96e2b0e5a4


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 7.8 M 33 ZeroCERT

42195 2021-08-25 09:23 1.exe  

8ed30c6c10b4ce0567bd443935666e7b


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 7.8 M 33 ZeroCERT

keyword