popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44686 2021-06-15 11:09 VOKLIGHT.exe  

9a86329fb7bd48fc778676e664d3d0be


NPKI UltraVNC PE File OS Processor Check PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		2.8 M 13 ZeroCERT

44687 2021-06-15 11:07 VOKLIGHTD.exe  

2b766f06adf2c73fb6da681572d72a6f


UltraVNC PE File OS Processor Check PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		2.8 M 13 ZeroCERT

44688 2021-06-15 11:05 ultramediaburner.exe  

6103ca066cd5345ec41feaf1a0fdadaf


AsyncRAT backdoor Gen1 PE File PE32 .NET EXE OS Processor Check GIF Format DLL PE64 VirusTotal Malware MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser ComputerName 		4.6 M 5 ZeroCERT

44689 2021-06-15 11:03 W10.exe  

9925c832892716a17f2d2cfe504d6014


AsyncRAT backdoor AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		6 8 1 9.8 M 39 ZeroCERT

44690 2021-06-15 11:03 I-Record.exe  

628507826e1b4f53cccc7d795a83a6e8


AsyncRAT backdoor PWS .NET framework njRAT PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 24 ZeroCERT

44691 2021-06-15 11:01 IDownload.exe  

ecb919c46197e6af3661c1883035536a


AsyncRAT backdoor Gen1 PE File PE32 DLL .NET DLL GIF Format OS Processor Check .NET EXE PE64 VirusTotal Malware MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser ComputerName 		6.0 M 3 ZeroCERT

44692 2021-06-15 11:00 vbc.exe  

616a10fdc3307fd483916e1b578c9f9c


AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		8.8 M 42 ZeroCERT

44693 2021-06-15 10:59 nnaf.exe  

f9f02646aeeaa754474089a00d07b0e5


AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName crashed 		1 2 1 10.2 M 23 ZeroCERT

44694 2021-06-15 10:58 img_23_61_78_802.exe  

d45879197ce5a42e7c810bca5e020af5


PWS Loki[b] Loki[m] DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 5 1 8.8 M 33 ZeroCERT

44695 2021-06-15 10:56 IDownload.exe  

4a6b686ed3f18f9aecf846d08a6aa948


AsyncRAT backdoor PWS .NET framework njRAT PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.4 35 ZeroCERT

44696 2021-06-15 10:55 UltraMediaBurner.exe  

d6a73306c5bdcc557880a455bfb1a4be


AsyncRAT backdoor PWS .NET framework njRAT PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		3.0 37 ZeroCERT

44697 2021-06-15 10:51 Document 53142810.xls  

76d9ad731b3417ce329035c3497d19eb


VBA_macro Generic Malware MSOffice File VirusTotal Malware unpack itself Tofsee Windows crashed 		1 2 1 5.8 23 ZeroCERT

44698 2021-06-15 10:51 Document 1659904.xls  

c03577c814275b568037f2eb9e0fc1e3


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		10 20 2 3.8 26 ZeroCERT

44699 2021-06-15 10:45 scbybttprepush528.exe  

5f32ab11399c7596889739620f178464


Gen2 Gen1 Emotet Anti_VM PE File OS Processor Check PE32 DLL PNG Format GIF Format MSOffice File JPEG Format PE64 VirusTotal Malware PDB suspicious privilege MachineGuid Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself AppData folder AntiVM_Disk China anti-virtualization VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Windows Browser ComputerName RCE DNS 		56 17 4 11.2 M 19 ZeroCERT

44700 2021-06-15 10:39 bin.exe  

285cc0e41ca87f5eb2a6d08680a0f94b


Admin Tool (Sysinternals Devolutions inc) Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.6 M 28 ZeroCERT

keyword