popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42811 2021-08-17 17:39 kl.exe  

78ce66dca7949aa8182c81b20ae321a0


RAT Generic Malware Themida Packer UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		2 3 1 10.6 35 ZeroCERT

42812 2021-08-17 17:34 vbc.exe  

ed42831e07a3c0a9f2240b6475f4ba3c


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 15 ZeroCERT

42813 2021-08-17 17:11 http://edgedl.me.gvt1.com/edge...  

1c8529a4577541f11238a25ce76c343e


DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM MSOffice File Code Injection exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 3.8 guest

42814 2021-08-17 16:17 out.pdf  

34d276c510abbf0cc876c261b0521236


PDF 		JYC

42815 2021-08-17 14:44 2.dll  

37e26534b70abd664cfed4961ad6ecbf


TA551 BazarLoader UPX PE File OS Processor Check DLL PE32 VirusTotal Malware Checks debugger unpack itself 		1.4 M 6 r0d

42816 2021-08-17 13:36 vbc.exe  

8396573aa3039b144f584107f785b321


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself DNS 		3 3.0 M 30 ZeroCERT

42817 2021-08-17 13:36 2.dll  

37e26534b70abd664cfed4961ad6ecbf


UPX AntiDebug AntiVM PE File OS Processor Check DLL PE32 Dridex TrickBot VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Kovter ComputerName DNS crashed 		11 8 4 10.4 M 6 ZeroCERT

42818 2021-08-17 13:35 vbc.exe  

2875b6d653a9311f91e1a2f28e5538e1


RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		6 14 1 5 9.2 M 39 ZeroCERT

42819 2021-08-17 10:20 Quranic Arabic Language Course...  

6af2470805fe10cf881871a6babf9986

VirusTotal Malware RWX flags setting unpack itself Tofsee 		2 2 1 2.4 M 3 ZeroCERT

42820 2021-08-17 10:15 zxcv.EXE  

575f6a65c28682f88fa808ba8e862d7f


PWS Loki[b] Loki.m Raccoon Stealer Gen1 Gen2 Generic Malware UPX Malicious Library Malicious Packer DNS Socket KeyLogger HTTP Internet API ScreenShot Http API Steal credential AntiDebug AntiVM PE File PE32 DLL OS Processor Check GIF Format JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee Ransomware OskiStealer Stealer Windows Browser Email ComputerName DNS crashed Password 		13 6 5 21.8 M 42 ZeroCERT

42821 2021-08-17 10:07 dllhost.exe  

5ee375628c34cd0aa0833e24bc31087a


RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 7.4 M 26 ZeroCERT

42822 2021-08-17 10:05 vbc.exe  

61521d238c7c60ca7e91881ffda4a5fa


UPX Malicious Library PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 1 7.0 M 40 ZeroCERT

42823 2021-08-17 10:03 .svchost.exe  

c8f7096833654a62280f5897fccfde65


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process VMware anti-virtualization Windows ComputerName Cryptographic key Software 		1 4 1 12.2 M 27 ZeroCERT

42824 2021-08-17 10:01 vbc.exe  

2e11cb22fcff3e1fbf803fea30380e75


UPX Malicious Library PE File PE32 VirusTotal Malware unpack itself Tofsee RCE crashed 		1 2 1 3.8 M 45 ZeroCERT

42825 2021-08-17 09:59 dow-0.exe  

53d55c75030ff7d58afd45080fa00dd2


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself Windows utilities AppData folder Windows 		10 25 2 7 5.0 M 43 ZeroCERT

keyword