popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44536 2021-06-23 09:17 vbc-09.exe  

4973f29c105dce3837d78fe291531f6b


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		11 13 2 7 10.4 M 26 ZeroCERT

44537 2021-06-23 09:16 OsB36TxkNFTkn1MKz.exe  

61286518a4a98a17eb6f4e85391b3ee4


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		11.2 36 ZeroCERT

44538 2021-06-23 09:14 wininit.exe  

ff5a7718e9f32b7332743f2b1b34d393


PWS Loki[b] Loki[m] AsyncRAT backdoor Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 6 1 15.2 M 23 ZeroCERT

44539 2021-06-23 09:14 new.xlsx  

87b64dec6a53c93bde6a4e984e0d51c0


Generic Malware MSOffice File Malware download VirusTotal Malware exploit crash unpack itself Windows Exploit DNS DDNS crashed Downloader 		1 5 4 5.6 20 ZeroCERT

44540 2021-06-23 09:12 vbc-09.exe  

ff2e823d200a33909f4adaa63e41e5e9


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		10.2 30 ZeroCERT

44541 2021-06-23 09:11 vbc.exe  

018c822e08bf5da34aab3a73a614f3f5


AsyncRAT backdoor Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		12.0 26 ZeroCERT

44542 2021-06-23 09:09 ongod.exe  

5013cd46f5bc64f2f91c2f1b26eff560


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		10.0 29 ZeroCERT

44543 2021-06-23 09:09 s.wbk  

636c20db99ab89978c5318b23dd17424


RTF File doc AntiDebug AntiVM VirusTotal Malware MachineGuid Checks debugger exploit crash unpack itself Tofsee Exploit DNS crashed 		2 2 4.2 31 ZeroCERT

44544 2021-06-23 09:07 md1_1eaf.exe  

0f3560389b1ca2df45c12958c4f1c58e


VMProtect PE File PE32 VirusTotal Malware crashed 		2.2 39 ZeroCERT

44545 2021-06-23 09:07 new.exe  

aadd62021160ebeee45e25c33977d9b3


Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 15.0 20 ZeroCERT

44546 2021-06-22 18:16 GetFile.exe  

da37656f71601d9b59eaf8a9618f4817


AsyncRAT backdoor PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself ComputerName DNS crashed 		3.4 12 guest

44547 2021-06-22 18:14 prince_of_persia_P_v4_x64.exe  

b7605ff2f14efbd06844cc4473711fa9


AsyncRAT backdoor Generic Malware PE File PE64 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory buffers extracted unpack itself Windows utilities Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key 		12 2 1 7.2 33 ZeroCERT

44548 2021-06-22 18:13 prince_of_persia_P_v4_x86.exe  

28906318e1bfa9949cd086e807a0f220


AsyncRAT backdoor Generic Malware PE File OS Processor Check PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		20 2 1 6.4 34 ZeroCERT

44549 2021-06-22 18:10 vbc.exe  

8da587a72663d0312b35d53f4d45735c


PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 2 9 8.2 18 ZeroCERT

44550 2021-06-22 18:09 vbc.exe  

357e95c47c4b8666b0fe33277a37f376


PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself RCE DNS crashed 		3.4 33 ZeroCERT

keyword