popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42241 2021-08-24 09:39 sefile.exe  

b1c5a3368b6c0c2aa2042560821dbe69


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself RCE 		2.0 M 25 ZeroCERT

42242 2021-08-24 09:35 bom.exe  

7151706b714e5711fc0c3a49fb4cf9be


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		5 11 1 4 9.2 M 24 ZeroCERT

42243 2021-08-24 09:33 chioma.exe  

e9c5234672c791846a076210769b9c87


Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.2 M 22 ZeroCERT

42244 2021-08-24 09:33 musik.exe  

8c02034958ae86a8d8b42fa5545561a7


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.0 M 45 ZeroCERT

42245 2021-08-24 09:32 bom-01.exe  

4f9bae274183d2340e7d0cf1d0a37b88


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		14 16 12 8.6 M 25 ZeroCERT

42246 2021-08-24 09:31 omass.exe  

ba6c5d53e9418b5ce3c569831b68a0c7


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.0 M 46 ZeroCERT

42247 2021-08-24 09:29 blessedzx.exe  

a27561650fe74ab80657545858791cd4


AgentTesla browser info stealer Generic Malware Google Chrome User Data Admin Tool (Sysinternals etc ...) Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS keylogger 		1 11.2 M 30 ZeroCERT

42248 2021-08-24 09:29 Microsoft.exe  

0defe1e926b2407ee4a292480d8ebf48


RAT Generic Malware Themida Packer Anti_VM PE File OS Processor Check .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		1 3 1 10.0 M 23 ZeroCERT

42249 2021-08-24 09:27 Windows.exe  

a6b0c68d5870d0962b905eb433ab1cb7


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		11.0 M 26 ZeroCERT

42250 2021-08-24 09:26 jojo.exe  

7de8ca081578b160483afc1f4d84c960


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.0 M 45 ZeroCERT

42251 2021-08-24 09:24 joboy.exe  

0fe65d945d9f773bec35a27ce6999a3f


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		2.8 M 37 ZeroCERT

42252 2021-08-24 09:24 pals.exe  

1995b0023c950d538750ede62a7c19db


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.0 M 44 ZeroCERT

42253 2021-08-24 09:24 BIN.exe  

fdbfac3db38e579f28f6a51e55e7b01b


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		16 18 1 11.2 M 32 ZeroCERT

42254 2021-08-24 09:23 bom-02.exe  

6e33655754e13782626f4b2282a8264d


Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		9 19 7 9.2 M 24 ZeroCERT

42255 2021-08-24 09:20 nd.exe  

e249c3cf931a39ce861670aca977b737


PE File PE32 VirusTotal Malware unpack itself 		1.6 M 23 ZeroCERT

keyword