popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43921 2021-01-15 17:14 LO-06.exe  

a71b92a0262b4067b2da39ad1f39bef5


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key DDNS keylogger 		2 1 19.6 M 55 ZeroCERT

43922 2021-01-15 10:59 invoice.exe  

07d297371e6af555aa5ed31d423de4bc


VirusTotal Malware unpack itself 		1.8 M 28 ZeroCERT

43923 2021-01-15 10:58 5SVA7Ab.dll  

7fea00378451a67e8ad1a95d337ca6a7


VirusTotal Malware unpack itself malicious URLs 		2.2 M 24 ZeroCERT

43924 2021-01-14 23:06 yx.dll  

f484e05278de137cef239080249c859e


VirusTotal Malware unpack itself 		1.8 M 26 ZeroCERT

43925 2021-01-14 23:00 yhdl.exe  

d6affe0bfbe329109f5dc3e785fce0b4


VirusTotal Malware PDB Code Injection Malicious Traffic Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself malicious URLs AntiVM_Disk Ransom Message VM Disk Size Check installed browsers check Interception Browser ComputerName Remote Code Execution DNS 		32 15 10.6 M 29 ZeroCERT

43926 2021-01-14 22:55 winlog.exe  

cd925558146dc80ccf028ce0e9a5c542


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		2 5 10.8 M 23 ZeroCERT

43927 2021-01-14 22:53 xAL2ZKjESrfO.dll  

e90ffc58b3d9d3237121a3af6d05b927


VirusTotal Malware unpack itself 		1.8 26 ZeroCERT

43928 2021-01-14 21:53 vbc.exe  

348c5527c97fb01007036353fc566fe3


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		12.2 M 28 ZeroCERT

43929 2021-01-14 21:53 vbc2.exe  

7c0158f3cf2b6d843226e3a1a86cc11f


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.6 M 22 ZeroCERT

43930 2021-01-14 21:38 TRSU3GWU9YT1QG.doc  

891461e859d74c54f7c50edcf2377d05


Vulnerability VirusTotal Malware Report Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		2 11 7 5.4 M 33 ZeroCERT

43931 2021-01-14 21:38 tttt.jpg.exe  

c82ca6c32016c3867edf5263e33687f8


Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS crashed 		2 4 4 13.4 M 32 ZeroCERT

43932 2021-01-14 21:30 tfsoft.exe  

1d6edfa073e4a8f072df28cfd5321bba


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic buffers extracted ICMP traffic unpack itself Windows utilities Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware VM Disk Size Check Tofsee Windows crashed 		6 12 1 15.4 M 51 ZeroCERT

43933 2021-01-14 21:30 svchost.exe  

deed11e2b4b23dbe0c9ef99b5390bd6f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process malicious URLs VMware anti-virtualization ComputerName DNS Software 		2 4 14.4 M 45 ZeroCERT

43934 2021-01-14 18:27 regasm.exe  

bdcead3de71d101dc2d02676be1c9df5


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		16 16 1 8.8 M 21 ZeroCERT

43935 2021-01-14 18:27 SlyOzj2S7kfU8q.php.exe  

9ea3fb3f680abbd409a76bb590db83f0


Remote Code Execution 		0.8 ZeroCERT

keyword