popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44626 2021-06-17 13:47 log.exe  

f72277eebaf6b7e2891b7ba24188ebda


AsyncRAT backdoor PE File .NET EXE PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces DNS crashed 		2 2 3 3.8 M 21 ZeroCERT

44627 2021-06-17 13:47 infostati.exe  

00ca5d98e8244569f3e07def869fb291


Raccoon Stealer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows DNS crashed 		1 4 3.6 M 24 ZeroCERT

44628 2021-06-17 13:45 gfers.exe  

dbf34c56d244279f0e989540fbd6cda2


Raccoon Stealer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows crashed 		2.8 M 30 ZeroCERT

44629 2021-06-17 13:44 Document%202519711.xls  

c64202fc6e89fc1c49cde536894ed99d


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		10 18 4 5.6 M 21 ZeroCERT

44630 2021-06-17 13:42 Document%20185781.xls  

aae5b4c8eb3968b6bf06074865070a4e


VBA_macro MSOffice File VirusTotal Malware Check memory unpack itself Tofsee DNS crashed 		10 20 4 5.8 M 18 ZeroCERT

44631 2021-06-17 13:39 ctrlxPWVtmxJrb.exe  

66f348f54eb3cf9d2fc3a91058bf3bb8


PE File PE32 VirusTotal Malware RWX flags setting unpack itself DNS 		3.0 M 58 ZeroCERT

44632 2021-06-17 13:38 http://srand04rf.ru/f7juhkryu4...  

270c3859591599642bd15167765246e3


AgentTesla Ficker Stealer browser info stealer Google Chrome User Data DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persist Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Check memory buffers extracted Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications AppData folder malicious URLs suspicious TLD sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Stealer Windows Exploit Browser Tor ComputerName DNS Software crashed 		2 7 5 16.0 M 55 Kim.GS

44633 2021-06-17 13:38 lv.exe  

4ae50cbb1eb34f2ab6880f25519504a4


NPKI Gen1 Gen2 Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence AntiDebug AntiVM VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS crashed 		2 9.2 M 43 ZeroCERT

44634 2021-06-17 13:37 xtMLjbxLmstVb.exe  

1af4b28e44d75b4fe50ae509798a626c


AsyncRAT backdoor PE File .NET EXE PE32 Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces DNS crashed 		2 2 3 3.0 M ZeroCERT

44635 2021-06-17 13:35 win32.exe  

983ddc2bc9503302e5ca3ff855d21763


PWS Loki[b] Loki[m] .NET framework Admin Tool (Sysinternals etc ...) Malicious Library DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		2 1 14.2 M 33 ZeroCERT

44636 2021-06-17 13:35 Document%2076896654.xls  

608d89a9afafdce353965d9ee16bd433


VBA_macro MSOffice File VirusTotal Malware Check memory unpack itself Tofsee DNS crashed 		10 19 4 5.8 M 19 ZeroCERT

44637 2021-06-17 13:34 https://www.naver.com/  

a1083e2e3bdef28aab0e42c012744d01


Http API Internet API ScreenShot DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Steal credential Downloader P2P persistence AntiDebug AntiVM JPEG Format PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		173 18 2 4.6 r0d

44638 2021-06-17 13:28 lv.exe  

643ac999a87cb24d6e1362e1112a9ae7


Emotet Gen1 Raccoon Stealer Gen2 Malicious Library DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence AntiDebug AntiV VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS crashed 		1 8.0 M 34 ZeroCERT

44639 2021-06-17 13:24 hope.exe  

d43338c66b34e2d4e15b090aeb58401c


Emotet Antivirus PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process WriteConsoleW Interception ComputerName RCE DNS crashed 		5.0 M 51 ZeroCERT

44640 2021-06-17 13:22 file.exe  

09634fc320a841c03969036e6b348a2f


Raccoon Stealer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows DNS crashed 		3.2 M 28 ZeroCERT

keyword