popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44716 2021-06-08 10:44 BTQbrowser.exe  

b12fbbf68290508b870ea4f9d38a25b4


AsyncRAT backdoor PWS .NET framework BitCoin AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious TLD Tofsee Windows DNS Cryptographic key 		1 4 1 10.6 28 ZeroCERT

44717 2021-06-08 10:24 Dota 2 Offline Launcher + Emu ...  

7e69d9b8cf9b27f9b918736123267086


PE File PE32 VirusTotal Malware PDB Check memory RWX flags setting unpack itself DNS 		3.2 38 ZeroCERT

44718 2021-06-08 10:22 BLI_057702308.exe  

6f86775cd014c339e3c8b25563fd51d9


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 26 ZeroCERT

44719 2021-06-08 10:19 excel  

4024e3a79b01981ce7e8c42c8c815d30


PE File OS Processor Check PE32 VirusTotal Malware DNS 		1 2.0 31 ZeroCERT

44720 2021-06-08 10:17 Dota 2 Offline Launcher + Emu ...  

7e69d9b8cf9b27f9b918736123267086


PE File PE32 VirusTotal Malware PDB Check memory RWX flags setting unpack itself DNS 		3.2 38 ZeroCERT

44721 2021-06-08 10:14 RFL_0570103064.exe  

ea5b036e25672815c17e85213586f118


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 22 ZeroCERT

44722 2021-06-08 10:12 11222.exe  

cf7421633145edb90fbcac702fb4603a


AgentTesla browser info stealer Google Chrome User Data Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself suspicious process Windows DNS 		1 7.4 M 42 ZeroCERT

44723 2021-06-08 10:12 IMG_0001_205_60_37.exe  

c222dad25c8ba8ab2af48692ad261bcf


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 27 ZeroCERT

44724 2021-06-08 10:10 RFL_0731_60_127.exe  

52757942734a95026f4499e2747f8007


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 23 ZeroCERT

44725 2021-06-08 10:07 BLI_0610_36_31.exe  

a8ad861ef6877f243bdfbb00ddf2f37b


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.4 M 40 ZeroCERT

44726 2021-06-08 10:06 IMG_52_67_21_33.exe  

becc9c4709bbee070275cd42acfc02c9


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 9.4 M 23 ZeroCERT

44727 2021-06-08 10:05 9011.exe  

ed4a90d8b23e1ca80bb595a9d9630be8


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 4 10.2 M 30 ZeroCERT

44728 2021-06-08 10:04 ewa.exe  

e177b9ddfcae8d13fe94d04395ea920e


PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.2 M 21 ZeroCERT

44729 2021-06-08 10:03 nanno1.exe  

d44345634f9dbc3d9cda94370dc66203


DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself human activity check Windows ComputerName DNS 		2 7.2 M 33 ZeroCERT

44730 2021-06-08 10:03 RFT_056_17_30_81.exe  

c1f2b32fc6c1f69190516de627f9fa43


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 14.6 M 34 ZeroCERT

keyword