popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42271 2021-08-24 08:24 Saturn.exe  

8bde7b905bea26c52a7576b133e11279


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 28 ZeroCERT

42272 2021-08-24 08:22 jquery.ps1  

bb1166e6ffd66a072c8a58a2c377919c


Generic Malware Antivirus PE File .NET DLL DLL PE32 Check memory buffers extracted WMI Creates executable files unpack itself Windows utilities AppData folder Windows ComputerName Cryptographic key 		4.2 guest

42273 2021-08-23 19:25 iqewbieiqbubqw.dll  

58fab5a273bc3bdca01648663e4f7be2


RAT Generic Malware PE File .NET DLL DLL PE32 VirusTotal Malware PDB 		0.6 M 3 ZeroCERT

42274 2021-08-23 19:25 vbc.exe  

d64d6e211e21f9bc7f8bd2c68ea42b54


Malicious Library PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 1 1 6.8 M 40 ZeroCERT

42275 2021-08-23 19:23 lv.exe  

7cb7086237327a68a89f9ffebbe5a228


Emotet Gen1 NPKI Gen2 Malicious Library UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiD AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 5.4 M ZeroCERT

42276 2021-08-23 19:20 kdotzx.exe  

691180d2c31121f24a2fee1ee8a34b2c


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.2 M 22 ZeroCERT

42277 2021-08-23 19:18 vbc.exe  

162c0de193b3ba1d3f873bb06a8bdd60


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 22 ZeroCERT

42278 2021-08-23 19:18 ksbgixgq.exe  

5be9bfad00f219b0d219261448a57bda


PWS Loki[b] Loki.m AgentTesla RAT Gen1 Formbook browser info stealer Generic Malware UPX Malicious Library ASPack Malicious Packer ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check DLL JPEG Format Browser Info Stealer Malware download FTP Client Info Stealer Vidar Arkei VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee ArkeiStealer OskiStealer Stealer Windows Browser Email ComputerName DNS Software Password 		10 6 9 4 18.8 M 17 ZeroCERT

42279 2021-08-23 19:18 dd.exe  

7c207438745687fd62777e3b18535020


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces AppData folder Tofsee Windows DNS Cryptographic key crashed 		13 18 4 6 14.6 M 20 ZeroCERT

42280 2021-08-23 19:14 sefile2.exe  

f403b3a7bba12aa247e7195e8bb9afe5


UPX Malicious Library PE File OS Processor Check PE32 PDB unpack itself 		1.0 M ZeroCERT

42281 2021-08-23 19:14 kl8.exe  

505468e6735f6b0bf0d37a937eb2d155


Generic Malware Themida Packer Anti_VM PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.8 M 40 ZeroCERT

42282 2021-08-23 19:09 r.exe  

305c02b6842f5b81a6fa7a2aab07b00e


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic ICMP traffic unpack itself 		13 26 1 4.0 42 ZeroCERT

42283 2021-08-23 19:01 Pk52FX0q62R4XoO.dll  

f0242add3e62b4bda6a1f3e38e98a73d


Malicious Library Malicious Packer PE File DLL PE32 VirusTotal Malware unpack itself Windows crashed 		2.6 39 ZeroCERT

42284 2021-08-23 18:58 taxve_710451_20210816_93407095...  

9a812ebcc070d2a63465ebb416ba8b95

VirusTotal Malware Check memory ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		5 6 2 4.8 M 27 ZeroCERT

42285 2021-08-23 18:54 Fattura_01557972.xls  

5f25557c3a67cc816c456e44f9a89bbe


VBA_macro KeyLogger ScreenShot AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection unpack itself 		2.4 3 ZeroCERT

keyword