popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44596 2021-06-18 09:48 mmm.exe  

32e3f8a1ab7698ec5b0644a8ac1d34b8


PWS .NET framework Admin Tool (Sysinternals etc ...) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.0 M 18 ZeroCERT

44597 2021-06-18 09:46 cmd.exe  

63dcb28db1ff4d702e97a1fa3e9ac02d


PE File .NET EXE OS Processor Check PE32 VirusTotal Malware MachineGuid Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces AppData folder Windows ComputerName DNS Cryptographic key crashed 		5.8 M 38 ZeroCERT

44598 2021-06-18 09:46 relvo.exe  

3f891f4ea01741d664416c3b34f64208


Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library PE File PE32 VirusTotal Malware RCE 		2.6 M 45 r0d

44599 2021-06-18 09:41 test.exe  

d57237560c25aff34850ab1980a0fb04


PE File PE32 Dridex TrickBot VirusTotal Malware unpack itself Kovter DNS 		1 1 2.6 52 ZeroCERT

44600 2021-06-18 09:12 aim-2044108491.xlsb  

6c8a2cdc722922d6e468d1d151a24333

Check memory Creates executable files unpack itself suspicious process Tofsee 		2 3 2 3.0 guest

44601 2021-06-18 09:12 aim-2042502358.xlsb  

3cde67faa456fb5019f7ce2b163bee1d

Check memory Creates executable files unpack itself suspicious process Tofsee DNS 		2 3 2 3.6 guest

44602 2021-06-18 09:12 aim-2043102860.xlsb  

2cdecf145abc952da288222aadb77c35

Check memory Creates executable files unpack itself suspicious process Tofsee 		2 3 2 3.0 guest

44603 2021-06-18 09:07 vidarses.exe  

7283347ba70004a56396caa0a2de7bb0


Gen1 PE File PE32 DLL OS Processor Check JPEG Format Browser Info Stealer Malware download FTP Client Info Stealer Vidar Arkei VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Malicious Traffic Check memory WMI Creates executable files unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process sandbox evasion WriteConsoleW VMware anti-virtualization installed browsers check Tofsee ArkeiStealer OskiStealer Stealer Windows Browser Email ComputerName RCE Firmware DNS Software crashed Password 		9 3 6 2 16.4 M 28 ZeroCERT

44604 2021-06-18 09:07 z7ggs.exe  

6b7554c5f2b7a246639156524fb86a78


AsyncRAT backdoor PWS .NET framework Gen1 Gen2 Http API Steal credential ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder installed browsers check Tofsee Ransomware Windows Browser Email ComputerName DNS Cryptographic key crashed 		4 3 4 13.6 M 46 ZeroCERT

44605 2021-06-18 09:06 srochno.exe  

92520c1d6273560cedd77c3842810ad3


Gen1 PE File PE32 DLL OS Processor Check JPEG Format Browser Info Stealer Malware download FTP Client Info Stealer Vidar Arkei Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory WMI Creates executable files unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare suspicious process sandbox evasion WriteConsoleW VMware anti-virtualization installed browsers check Tofsee ArkeiStealer OskiStealer Stealer Windows Browser Email ComputerName RCE Firmware DNS Software crashed Password 		9 3 6 1 15.0 M ZeroCERT

44606 2021-06-18 08:09 Clapped.exe  

fb68c8251f6b0ce4c89fa24e61e8d1bc


AsyncRAT backdoor BitCoin AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 4 2 13.0 M 42 ZeroCERT

44607 2021-06-18 08:09 relvo.exe  

3f891f4ea01741d664416c3b34f64208


PE File PE32 VirusTotal Malware RCE DNS 		3.2 M 46 ZeroCERT

44608 2021-06-18 08:03 111s.exe  

ee4a89d1a2258c8b9a716bac64f15c2c


AsyncRAT backdoor PWS .NET framework PE File .NET EXE OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName RCE DNS Cryptographic key Software crashed 		2 4 2 8.2 20 ZeroCERT

44609 2021-06-18 08:03 http://188.119.113.80/1/test.e...  

d57237560c25aff34850ab1980a0fb04


AntiDebug AntiVM VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 1 5 5.6 52 ZeroCERT

44610 2021-06-17 18:26 win32.exe  

5fcb1ad7eb5087f9645b96b2f7700a61


PWS Loki[b] Loki[m] .NET framework Admin Tool (Sysinternals etc ...) Malicious Library DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		2 1 13.0 21 ZeroCERT

keyword