popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44731 2021-06-08 10:02 BLI_0617851034.exe  

5346c6935008b47b700b97482463099c


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 8.2 M 22 ZeroCERT

44732 2021-06-08 10:00 spc  

0600368dd5cd4cf1fc90f41827518b29


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware Code Injection Check memory Checks debugger unpack itself Browser Email DNS 		4.4 M 29 ZeroCERT

44733 2021-06-08 10:00 BTL_01880433.exe  

bdccbcaabf832a0a2b0f74afcc3ba8a1


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 4 4 10.0 M 21 ZeroCERT

44734 2021-06-08 09:55 br.exe  

1c85f40e4abe47f93982099c8d9753c1


AsyncRAT backdoor PWS .NET framework Anti_VM Malicious Library DGA DNS SMTP Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Internet API ScreenShot Downloader AntiDebug AntiVM PE File .NET EXE PE32 Malware download NetWireRC VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Ransomware BitRAT Windows ComputerName DNS Cryptographic key keylogger 		1 1 13.4 M 40 ZeroCERT

44735 2021-06-08 09:55 RFL_06601287.exe  

d87d1faa4c23aa64e915d4d4f269e105


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows ComputerName DNS crashed 		4.8 17 ZeroCERT

44736 2021-06-08 09:32 dootakim.vbs  

7bf15c10dd4e523a1338d054c0ace9d9

Malware Malicious Traffic buffers extracted WMI wscript.exe payload download Creates shortcut Creates executable files ICMP traffic Tofsee Windows ComputerName DNS 		2 4 2 6.8 M ZeroCERT

44737 2021-06-08 09:16 https://smyun0272.blogspot.com...  

aea34c0a7532eeebd2f9d29b312ef6a0


AntiDebug AntiVM PNG Format JPEG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		20 16 2 4.2 ZeroCERT

44738 2021-06-08 09:04 vbc.exe  

5313f320a680a992243c59f38561ba9a


PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Malicious Library DNS Socket Sniff Audio KeyLogger Code injection AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key keylogger 		2 4 1 12.6 16 ZeroCERT

44739 2021-06-08 09:02 Inv%20799146.xls  

c72b5321c62c54829b3300ee5d9441e1


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee Windows crashed 		1 2 1 5.8 20 ZeroCERT

44740 2021-06-07 21:06 vbc.exe  

64eaf97106ba76288f92396de46f322c


Generic Malware Malicious Packer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows RCE crashed 		3.0 32 ZeroCERT

44741 2021-06-07 19:03 v.wbk  

ca7ed32ac5a746dcf9529229d0b3e45d


RTF File doc AntiDebug AntiVM FormBook Malware download Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS crashed Downloader 		5 9 8 4.2 ZeroCERT

44742 2021-06-07 18:07 max.exe  

c93c429db9152f674a7980fb8935ab63


Admin Tool (Sysinternals Devolutions inc) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		10.4 M 32 ZeroCERT

44743 2021-06-07 18:07 loader1.exe  

f20a27b803bf2a57928f87af2d954ed3


PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder Windows 		24 26 1 4 6.6 M 31 ZeroCERT

44744 2021-06-07 18:02 bin-01.exe  

89ceaf750a8de940686e838bef97b893


Admin Tool (Sysinternals Devolutions inc) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.4 M 28 ZeroCERT

44745 2021-06-07 18:01 qTRPobspXvlwT1l.exe  

4a814df442bac80adc95a552acfe9cce


PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Anti_VM Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 M 29 ZeroCERT

keyword