popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42826 2021-08-17 09:59 rundll32.exe  

3a77a27df8d701a07b76d63091465c11


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.0 M 36 ZeroCERT

42827 2021-08-17 09:58 dow-01.exe  

815a3dbde4d501e96222d6de9b0be3fc


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		18 18 2 12 8.4 M 31 ZeroCERT

42828 2021-08-17 09:56 bobbyzx.exe  

37a5f6cc78f098591dd05bf7dccbdcc5


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.4 M 32 ZeroCERT

42829 2021-08-17 09:56 dow-2.exe  

79ccfb5a40b349d6012a35b7072f9f1a


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		16 17 2 8 8.8 M 30 ZeroCERT

42830 2021-08-17 09:54 bHiq3IZ1xoLA.php  

ffc642eb82de920453e88f647fb4c246


Malicious Packer Malicious Library PE File DLL PE32 unpack itself Windows crashed 		1.6 ZeroCERT

42831 2021-08-17 09:48 dow.exe  

fc610878793ee9ee26ed44da1549f4f8


RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8 13 1 8 9.6 M 27 ZeroCERT

42832 2021-08-17 09:45 planes.exe  

fa98ed9794e56f5598319a77831d6339


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		9.8 M 26 ZeroCERT

42833 2021-08-17 09:43 zxcvb.exe  

2cae1b3be4c37e8f0ca5dac99dbbac17


PWS Loki[b] Loki.m RAT Gen1 Gen2 Generic Malware UPX Malicious Library Malicious Packer DNS Socket KeyLogger HTTP Internet API ScreenShot Http API Steal credential AntiDebug AntiVM PE File .NET EXE PE32 JPEG Format DLL OS Processor Check GIF Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee Ransomware OskiStealer Stealer Windows Browser Email ComputerName DNS crashed Password 		13 6 8 24.4 M 15 ZeroCERT

42834 2021-08-17 09:42 vbc.exe  

3244a92cbba0f5edcae4ea2f2f0d1b7d


UPX Malicious Library PE File PE32 VirusTotal Malware unpack itself RCE 		2.0 M 32 ZeroCERT

42835 2021-08-17 09:40 .wininit.exe  

73c3916832698d6d47cde8593d7816f8


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 4 2 10.0 M 40 ZeroCERT

42836 2021-08-17 09:36 mazx.exe  

1423f1e7d436fa26d50fd804f5b93431


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3 6 1 1 8.2 M 24 ZeroCERT

42837 2021-08-17 09:34 plugmanzx.exe  

ec9dc86cbda5ad0a0b6c79654e361642


Generic Malware Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM PE File .NET EXE PE32 Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 14.2 M 30 ZeroCERT

42838 2021-08-17 09:33 sufile.exe  

0ca116299ae13d37e2368d09f208fd2d


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 42 ZeroCERT

42839 2021-08-17 09:26 unknown.exe  

fe51eac852001236448794e51ba22956


RAT PWS .NET framework Generic Malware PE File .NET EXE PE32 suspicious privilege MachineGuid Check memory Checks debugger unpack itself ComputerName 		1.6 ZeroCERT

42840 2021-08-17 09:25 Simplydisk_TPEB_Tariff_CtoC_16...  

fd7075efa74442ec550ba1b0613f0db3


Malicious Packer Malicious Library PE File DLL PE32 VirusTotal Malware Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting unpack itself Windows utilities suspicious process Tofsee Windows ComputerName crashed 		5 4 1 7.2 9 ZeroCERT

keyword