popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42226 2021-08-24 12:34 vbc.exe  

8901adddca065dc397595e7d835171e2


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.4 M 31 ZeroCERT

42227 2021-08-24 12:31 mn.exe  

0bdd37b8a257b2c21b63508c9e53ac04


PE File PE32 VirusTotal Malware unpack itself 		1.8 M 33 ZeroCERT

42228 2021-08-24 12:31 Mars.exe  

af93c6b29531289459db2cbe41a0cb1c


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 28 ZeroCERT

42229 2021-08-24 12:29 5.php  

da06f080170b823ad617874958f2fcaf


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.0 M 20 ZeroCERT

42230 2021-08-24 12:29 pope.exe  

36a443909fb713e12bfd996dde324f0b


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName DNS Cryptographic key 		1 3.2 M 28 ZeroCERT

42231 2021-08-24 12:28 omozx.exe  

76bb446dcf0629ec91c21cb40ca202d5


Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Disables Windows Security Checks Bios Detects VirtualBox powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW VMware anti-virtualization IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 4 21.2 M 35 ZeroCERT

42232 2021-08-24 12:27 mb.exe  

5c2f7d7c59e2651c57690c5e76ebf2a7


PE File PE32 VirusTotal Malware unpack itself 		1.6 M 21 ZeroCERT

42233 2021-08-24 12:18 soul3ss.exe  

411ca7ba89ae45e92f9ed4663f903335


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 8.6 M 23 ZeroCERT

42234 2021-08-24 12:05 DCRAT.exe  

e8317caac6568f4d37d8535a1e56ad29


RAT Generic Malware Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS Processor Check .NET EXE PE3 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS crashed 		2 1 10.2 48 ZeroCERT

42235 2021-08-24 12:01 StaticArrayInitTypeSize.exe  

50c7ebc89793bd7c8ba93468efec11dc


PWS Loki[b] Loki.m Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		3 2 6 14.6 31 ZeroCERT

42236 2021-08-24 11:58 Explorer.exe  

fd3b4ad42fe49dff3b786e6e949fba83


AntiDebug AntiVM MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 8 2 4.2 ZeroCERT

42237 2021-08-24 11:57 211575.xls  

85eec686404e8d636c1d2e115f0a28a2


VBA_macro MSOffice File VirusTotal Malware RWX flags setting unpack itself 		1.2 6 ZeroCERT

42238 2021-08-24 09:48 galvanizedzx.exe  

395b7c06e528ce1943e4f10b923acc9e


PWS Loki[b] Loki.m Gen1 Gen2 Generic Malware Malicious Library Malicious Packer UPX DNS Socket KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Ransomware Zeus Windows Browser Email ComputerName Cryptographic key Software 		1 2 1 15.4 M 25 ZeroCERT

42239 2021-08-24 09:43 bd.exe  

d25769efd533ba3d13a13a3274fe69ab


PE File PE32 VirusTotal Malware unpack itself 		1.6 M 29 ZeroCERT

42240 2021-08-24 09:41 ob.exe  

95fe547bbaa4db499b9d04bf7843608b


PE File PE32 VirusTotal Malware unpack itself 		1.6 M 21 ZeroCERT

keyword