popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43501 2021-02-03 18:51 light.exe  

3722074c541640dafeaf62c0e12080c0


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		11.4 M 10 ZeroCERT

43502 2021-02-03 18:50 licenser.txt.exe  

63e7beb498ebe532263c977d71f664c3


VirusTotal Malware Buffer PE Check memory buffers extracted Creates executable files unpack itself AppData folder malicious URLs crashed 		4.8 M 16 ZeroCERT

43503 2021-02-03 18:47 jayx.scr  

f0247e5dd3b7ddcfb059cac5ea5b91c3


VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 3.8 M 22 ZeroCERT

43504 2021-02-03 18:47 kingtroupx.scr  

683900ad1d44fb2616653b936ac1f9e1


VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 3.8 M 20 ZeroCERT

43505 2021-02-03 18:43 file.exe  

b8b7b4f5bc704558dcf41a39c2f9fd6d


VirusTotal Malware unpack itself Remote Code Execution DNS 		2.8 M 26 ZeroCERT

43506 2021-02-03 18:41 bobbyx.exe  

c578ab7bf915d54643e598c11c9922ea


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		1 2 8.2 M 18 ZeroCERT

43507 2021-02-03 18:35 417594IMG_29866.pdf.exe  

d778c0c06c91dec54fc46fe02d1f7e1a


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows DNS 		4 8 1 10.8 M 20 ZeroCERT

43508 2021-02-03 18:34 ana.exe  

efed0f9fe0d138e7efe50e663e7f3a98


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName crashed 		9.4 M 17 ZeroCERT

43509 2021-02-03 18:22 139913IMG_33687.pdf.exe  

4e37d001d53117d028fa01eb27b48f18


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.2 24 ZeroCERT

43510 2021-02-03 18:22 aguerox.scr  

c96bca895f08287e145cf97fa5b4158f


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 3 7 1 15.8 M 18 ZeroCERT

43511 2021-02-03 18:12 winlog4.exe  

524ac66f24321c6da65f2b098978bff7


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		12 14 9.6 M 16 ZeroCERT

43512 2021-02-03 18:11 winlog3.exe  

5ec4108db8c98d030cea2bb1ea95b725


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		2 5 10.0 27 ZeroCERT

43513 2021-02-03 17:51 winlog2.exe  

84756d09ad2ebedc58b7a9c1f8eef37a


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		8 15 9.2 M 17 ZeroCERT

43514 2021-02-03 17:50 winlog.exe  

d64f47ad1647d93473130d1e301adbb0


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		10 12 8.6 M 16 ZeroCERT

43515 2021-02-03 17:33 vbc.exe  

766ba75de87fda229a25dbccd8a6218f


VirusTotal Malware RWX flags setting unpack itself malicious URLs Tofsee DNS crashed 		2 1 4.4 M 18 ZeroCERT

keyword