popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44671 2021-06-16 09:03 CRTbrowser.exe  

dcfbe1432bfb588cec075420669d248d


AsyncRAT backdoor PWS .NET framework PE File .NET EXE PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces suspicious TLD Tofsee 		1 2 1 3.6 49 ZeroCERT

44672 2021-06-16 08:54 3306.exe  

369af7277751019de4e0a12b294d24de


Gh0st RAT Malicious Packer PE File PE32 VirusTotal Malware AutoRuns sandbox evasion Windows 		3.6 M 61 r0d

44673 2021-06-16 08:13 svchost.exe  

6572076bc21603b0612703e4dd2e1f67


Generic Malware Admin Tool (Sysinternals Devolutions inc) Malicious Packer PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		2.0 M 40 r0d

44674 2021-06-15 22:25 svchost.exe  

6572076bc21603b0612703e4dd2e1f67


PE File PE32 VirusTotal Malware RWX flags setting unpack itself DNS 		2.4 M 35 ZeroCERT

44675 2021-06-15 22:23 vbc.exe  

bd75edbd6e80ceb4ebf356cda78263f1


AsyncRAT backdoor PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		1 9.6 21 ZeroCERT

44676 2021-06-15 22:20 3306.exe  

369af7277751019de4e0a12b294d24de


PE File PE32 Malware download VirusTotal Malware GhostRAT AutoRuns sandbox evasion Windows Backdoor DNS 		1 2 4.2 M 61 ZeroCERT

44677 2021-06-15 22:18 win32.exe  

a16db782cfe5e230ebf096ca3ff78037


AsyncRAT backdoor PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		8.0 M 22 ZeroCERT

44678 2021-06-15 22:16 bmw.exe  

f7bd49ac1e676db8c9f2e3bbd5b03a75


PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows DNS crashed 		3.2 25 ZeroCERT

44679 2021-06-15 22:13 o.wbk  

3b434e413f2d01c57af401e14b87336e


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Checks debugger exploit crash unpack itself Windows Exploit DNS crashed 		1 1 7 4.8 M 27 ZeroCERT

44680 2021-06-15 22:11 covid.exe  

74084608256e6e4c3434d17217d0993a


Generic Malware Malicious Packer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows RCE DNS crashed 		3.8 M 51 ZeroCERT

44681 2021-06-15 22:10 ReferenciaCorreios798.msi  

8a2af0e991663612e3569de186ec4ee7


Gen2 Antivirus OS Processor Check MSOffice File suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		1.8 ZeroCERT

44682 2021-06-15 21:29 Document 81161221.xls  

d65c8d73d13ed5d4f2973631101c4b34


VBA_macro Generic Malware MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		10 18 4 4.0 30 ZeroCERT

44683 2021-06-15 21:29 dra.exe  

45efa9779ec5f51bbc501dbb6bbbba3e


PE File PE32 DLL FormBook Malware download Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion 		22 24 2 5.0 ZeroCERT

44684 2021-06-15 21:28 imagen01.jpg  

793707365df26450bc8642f518a540f0


PE File PE32 PE64 VirusTotal Malware Malicious Traffic buffers extracted Creates shortcut unpack itself Windows utilities suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Windows Tor DNS keylogger 		1 3 4 7.4 M 43 ZeroCERT

44685 2021-06-15 21:23 document-37-1849.xls  

c41a21a821bcdea1d3ab26ebef055eed


MSOffice File VirusTotal Malware Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows 		1 2 6.6 7 ZeroCERT

keyword