popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43786 2021-01-22 10:18 CL4G.dll  

3e1249e4d0b0b61d493da93139b9f3a4


VirusTotal Malware 		1.4 M 50 ZeroCERT

43787 2021-01-22 10:18 5555555555_2.jpg.exe  

42574d38cc2760ec1e2ed9beb234567b

 0.2 M ZeroCERT

43788 2021-01-22 10:13 zbf8jiX.exe  

3b6e27d8d7051194ba8dd6fd3a299f95


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName 		1 2 1 13.0 M 45 ZeroCERT

43789 2021-01-22 10:09 5555555555.jpg.exe  

c1a0cf6c95370e2bb4e3d7b8353d883e


VirusTotal Malware 		1.4 M 41 ZeroCERT

43790 2021-01-22 09:31 winlog4.exe  

ac98cc8a1ff04aa8ae259ab9436a1fa7


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 10.2 M 34 ZeroCERT

43791 2021-01-22 09:31 winlog3.exe  

f9d11b84c36b4ef4af4f24aae95f9fb5


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 9.2 M 32 ZeroCERT

43792 2021-01-22 00:30 winlog2.exe  

f69047c67c621e68c5b21d46fa60a629


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities malicious URLs Windows DNS 		12 17 13.0 M 23 ZeroCERT

43793 2021-01-22 00:29 winlog.exe  

3a9e68325d16c69df66db1b81f666601


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs DNS 		8 13 2 9.4 M 13 ZeroCERT

43794 2021-01-22 00:21 win32.exe  

1931f5b75ae8d9c14ec61cdd53e70f21


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs DNS 		22 24 10.2 M 24 ZeroCERT

43795 2021-01-22 00:21 vbc3.exe  

e09c5be82b79d79dc377271d67f92a89


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 13.2 M 27 ZeroCERT

43796 2021-01-22 00:10 vbc.exe  

e9ccfae9cb025410406a12538137c69f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities AppData folder malicious URLs Windows 		4 16 13.0 M 38 ZeroCERT

43797 2021-01-22 00:09 vbc2.exe  

0705cb1278a79218eec9badca52ab8b3


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 4 13.2 M 20 ZeroCERT

43798 2021-01-22 00:05 TaAgente.exe  

4cb563bf89a0407ba573f86a2f2a2030


VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Windows Cryptographic key 		2 3 4.8 M 26 ZeroCERT

43799 2021-01-22 00:02 svchost.exe  

5aeb0da76f99119932bf52c3eb8b0767


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs 		28 26 9.8 M 31 ZeroCERT

43800 2021-01-22 00:00 obo.exe  

1965c283581daeb2fc16e26de73839aa


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS crashed 		10.4 M 31 ZeroCERT

keyword