popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42301 2021-08-31 11:16 vbc.exe  

5353b45c9539a13e90412b00cffd5a5a


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Tofsee DNS 		1 3 1 3.8 M 20 ZeroCERT

42302 2021-08-31 11:14 osamazx.exe  

a17a64737d92abc4c83b976aaaad4f36


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.6 M 20 ZeroCERT

42303 2021-08-31 11:12 vbc.exe  

aa17e1f1f3f2b6b46064b5f425b5a12d


RAT Generic Malware Antivirus Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 GIF Format Malware download VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder Tofsee Windows ComputerName DNS Cryptographic key crashed Downloader 		1 5 6 10.0 M 27 ZeroCERT

42304 2021-08-31 11:12 vbc.exe  

aca08c69a22e6f4f07cb44a74e7b9dac


Malicious Library PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Tofsee 		29 27 2 6 6.6 M 26 ZeroCERT

42305 2021-08-31 11:12 b3A6h.exe  

bc867757658b294a9d7fbfd2d967e477


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		1 9.2 M 21 ZeroCERT

42306 2021-08-31 11:10 arinzezx.exe  

bbb076c1946e425146450691549f030b


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 3 12.8 M 29 ZeroCERT

42307 2021-08-31 11:10 vbc.exe  

fdb84298836a2682cf6ed805bc8852de


RAT Generic Malware Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM PE File .NET EXE PE32 GIF Format Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check human activity check Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 6 2 15.4 M 21 ZeroCERT

42308 2021-08-31 11:10 catzx.exe  

5b86fcaf5ab130c47731cc168a2ca852


Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 13.6 M 25 ZeroCERT

42309 2021-08-31 11:05 bin.exe  

b8a04e2c814ff33e4375bcea671ea6f7


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		10.0 M 27 ZeroCERT

42310 2021-08-31 11:05 bobbyzx.exe  

5ecf99b81c8f50209f007541dfca08c1


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.6 M 21 ZeroCERT

42311 2021-08-31 11:04 vbc.exe  

3d1d650b2318cdddaf5e92447ba76b56


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		10 18 1 8.2 M 26 ZeroCERT

42312 2021-08-31 11:03 job.exe  

00208f1aa6ebd03ebf70e847b6f690c8


Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.6 M 24 ZeroCERT

42313 2021-08-31 10:53 AXC.exe  

75fc478585b12d3a8f0216b1b28c6944


Generic Malware UPX PE File PE32 Malware download VirusTotal Malware AutoRuns Malicious Traffic Check memory RWX flags setting unpack itself suspicious process anti-virtualization Windows DNS keylogger 		3 1 8.0 M 28 r0d

42314 2021-08-31 10:44 AXC.exe  

0cb653b63f1f96cc5b362096cede91e4


UPX Malicious Packer PE File PE32 Malware download VirusTotal Malware AutoRuns Malicious Traffic Check memory RWX flags setting unpack itself suspicious process anti-virtualization Windows DNS 		1 1 7.4 M 20 r0d

42315 2021-08-31 09:40 WARZONE.exe  

953055e0715e637ff0f7fe84b126eac9


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		11.0 M 52 ZeroCERT

keyword