popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
42886 2021-08-15 12:18 Get-Variable.exe  

0e78df69265dc57c37673bdee540ce2f


VMProtect UPX Malicious Library PE File PE32 Malware download VirusTotal Malware IoC Malicious Traffic Checks debugger unpack itself Windows utilities suspicious process Kovter Zeus Windows ComputerName Trojan DNS 		3 1 6 6.4 23 ZeroCERT

42887 2021-08-14 16:32 b4cfc49d647ebeffb99579dbd4be2a...  

b594afc619b7f19b04c125b093ddb099


CobaltStrike Generic Malware Malicious Packer UPX Malicious Library PE File PE64 VirusTotal Malware unpack itself crashed 		2.4 39 r0d

42888 2021-08-14 10:09 Setup-Outfox.exe  

598c257c885f0b71816ff13d27b2579e


BitCoin Generic Malware AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 11.8 M 38 ZeroCERT

42889 2021-08-14 10:06 sfgnvskjgnvlwknrfvlqknervjqnfb...  

d30c39fba040fff4e671659fd820bea5


RAT PWS .NET framework Generic Malware UPX OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 7.4 M 41 ZeroCERT

42890 2021-08-14 10:06 Mozi.m  

f9d9a97220224f47484df6d10733e931


Eir D1000 routers Vulnerability AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName keylogger 		5.4 31 ZeroCERT

42891 2021-08-14 10:06 P4SDww.exe  

d8b2a0b440b26c2dc3032e3f0de38b72


Gen1 RAT Generic Malware UPX Malicious Library Malicious Packer .NET EXE PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Ransomware Windows Browser ComputerName Cryptographic key Software crashed 		13 10 2 3 12.4 M 41 ZeroCERT

42892 2021-08-14 10:02 refno2.exe  

8ed7a017019ddb3974773f00201ce7ff


RAT PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5 15 1 9.0 ZeroCERT

42893 2021-08-14 10:00 .svchost.exe  

85ef4d2c4d482b353c237e1145fc52bd


GuLoader Generic Malware Malicious Packer UPX Malicious Library PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		2.2 M 30 ZeroCERT

42894 2021-08-14 09:59 software.exe  

e4102e8888cdd54defb8babef27dcaef


Gen2 RAT Generic Malware Themida Packer Malicious Packer UPX Malicious Library OS Processor Check .NET EXE PE File PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName RCE Firmware Cryptographic key crashed 		2 4 1 9.4 M 20 ZeroCERT

42895 2021-08-14 09:57 refno3.exe  

c7cda00215a9747d2a6142919bd45227


Generic Malware Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.8 M 44 ZeroCERT

42896 2021-08-14 09:56 rollerkind2.exe  

29873d5f4db7060243199e49d7af8930


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 20 ZeroCERT

42897 2021-08-14 09:55 abdulzx.exe  

a999f70ef203107555ad230346b89c80


Generic Malware Antivirus UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself 		1.8 M 21 ZeroCERT

42898 2021-08-14 09:54 apines.exe  

d60de31e6e431d66634f84ef0ee29f37


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.4 M 38 ZeroCERT

42899 2021-08-14 09:53 update.dll  

fef6b272e83c2db9338ad55ffb6e8f6e


UPX Malicious Library Admin Tool (Sysinternals etc ...) OS Processor Check DLL PE File PE32 VirusTotal Malware Buffer PE Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser DNS Cryptographic key crashed 		1 5.2 M 23 ZeroCERT

42900 2021-08-14 09:52 pub1.exe  

9f6cc7e30cf819e9e22558d3868a692d


UPX Malicious Library OS Processor Check PE File PE32 PDB unpack itself 		1.4 M ZeroCERT

keyword