popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44941 2021-06-01 09:25 Yx3PBY9RC15I0sLk.jpg.ps1  

18fd76d1d31e0833d26a36729842c5f7


Antivirus GIF Format VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		2 2 1 9.2 M 2 ZeroCERT

44942 2021-05-31 18:14 ConsoleApp9.exe  

74e874bb14c48f4d33153798bb166edc


AsyncRAT backdoor AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS crashed 		2 4 3 8.8 23 ZeroCERT

44943 2021-05-31 18:10 svchost.exe  

10d1dc044b4f546c7e1c29f40d364a77


PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process anti-virtualization DNS 		3.4 28 ZeroCERT

44944 2021-05-31 18:07 dllhost.exe  

10aad0ae040c9fbde27793e1cb213d73


PE File PE32 VirusTotal Malware Creates executable files DNS 		35 1 3.2 38 ZeroCERT

44945 2021-05-31 18:06 svchost.exe  

d850f8d4823240e54f834f85e09bd9e7


PE File PE32 VirusTotal Malware Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS 		3.2 32 ZeroCERT

44946 2021-05-31 18:05 asd80.exe  

b7c53f778e82c1594d8a1a27ebb65af0


AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 9.4 23 ZeroCERT

44947 2021-05-31 11:25 qv55b3lqjXhJQckX.jpg.ps1  

6ee03a2d6b4558fa09cdf1e33dcaa897


Antivirus GIF Format VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		4 4 1 2 9.4 1 ZeroCERT

44948 2021-05-31 11:15 NmX.txt.html  

f69a35821e442a111ebbe08c7fc22060


VBScript PowerShell Obfuscated File VirusTotal Malware crashed 		0.8 M 17 r0d

44949 2021-05-31 11:05 ao.exe  

b1d319888860b7a6400c5e5099d59e48


Amadey PWS Loki[b] Loki[m] Admin Tool Sysinternals Antivirus HTTP Code injection Http API Internet API AntiDebug AntiVM PE File .NET EXE PE32 DLL JPEG Format Malware download Amadey FTP Client Info Stealer ENERGETIC BEAR VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote suspicious process AppData folder sandbox evasion WriteConsoleW Windows Email ComputerName DNS Cryptographic key Software crashed 		3 1 5 20.2 M 45 r0d

44950 2021-05-31 09:37 Ls_Droid_v1.1.9.0.exe  

a1459b6cd648d10da05707b69166d2f6


Anti_VM .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Tofsee Windows Firmware crashed 		1 3 1 9.2 M 31 ZeroCERT

44951 2021-05-31 09:35 jaja.exe  

54262706e573614d224fec09edb4f7cf


Malicious Library Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		16.2 46 ZeroCERT

44952 2021-05-31 09:32 new.exe  

03abf4527d2c88e4716e194e93c9b07b


AsyncRAT backdoor PWS .NET framework AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.8 40 ZeroCERT

44953 2021-05-31 09:32 ccsetup579.exe  

195eecffa8cb3f26eb11eb4aa379eaf6


AsyncRAT backdoor Antivirus DNS Socket HTTP Code injection Http API Internet API ScreenShot Downloader AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process AppData folder Windows ComputerName Cryptographic key crashed 		10.4 M 42 ZeroCERT

44954 2021-05-31 09:31 NmX.txt.html  

f69a35821e442a111ebbe08c7fc22060


Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key 		4 2 6.8 17 ZeroCERT

44955 2021-05-31 09:31 al.exe  

52abd9b0522751f14763b92baf4afa37


NPKI Antivirus PE64 PE File VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		7.4 36 ZeroCERT

keyword