popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45001 2021-05-27 09:20 vbc.exe  

81fbda3909166d5283aa85295b8c3394


AsyncRAT backdoor PWS .NET framework Malicious Library .NET EXE PE File OS Processor Check PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.2 27 ZeroCERT

45002 2021-05-27 09:18 covid.exe  

a7a8c3e6b8854ab03b71a5b128d7b9ce


Malicious Library DNS AntiDebug AntiVM .NET EXE PE File PE32 Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 13.6 ZeroCERT

45003 2021-05-27 09:18 Document%20777622.xls  

a7b63000938bbeb31722acac4a96b004


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee 		10 19 4 2.8 20 ZeroCERT

45004 2021-05-27 09:03 PO 7080027.xls  

f1fcca46fd7af3f90aa67654250e7a05


VBA_macro MSOffice File VirusTotal Malware ICMP traffic unpack itself Tofsee 		10 20 4 4.0 M 20 ZeroCERT

45005 2021-05-27 07:50 Zaplata.exe  

4fd2df0f767d5db670bc28f9fff6b1f4


PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Browser 		1.8 46 ZeroCERT

45006 2021-05-26 17:57 0BwVRYsmMqnmVek1UbU9tQnRjS28  

d9b498a75f204feb90dbe7e6da25ea11

 ZeroCERT

45007 2021-05-26 17:57 vbc.exe  

9fda9bae06e1705bc0baafb7ae723257


Malicious Packer PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself 		2.0 M 37 r0d

45008 2021-05-26 17:53 bmw1.exe  

e566e9b44e24135623225c6626391307


PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows DNS crashed 		2.8 M 20 ZeroCERT

45009 2021-05-26 17:50 vbc.exe  

893f73e3c8296eb13964494da6157511


AsyncRAT backdoor PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		9.4 M 7 ZeroCERT

45010 2021-05-26 17:49 Lammer.exe  

49545f0af79ded22054bfd851bb3d864


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself WriteConsoleW DNS DDNS 		2 1 5.8 36 ZeroCERT

45011 2021-05-26 17:48 edjpx01.zip  

78b7c12458b63f284b2b0b4386351ddd

VirusTotal Malware DNS 		1.4 22 ZeroCERT

45012 2021-05-26 17:47 HOO.exe  

b0c6368fb892e87132504695169245d0


PE File PE32 VirusTotal Malware RWX flags setting unpack itself anti-virtualization crashed 		2.4 25 ZeroCERT

45013 2021-05-26 17:44 0BwVRYsmMqnmVek1UbU9tQnRjS28  

d9b498a75f204feb90dbe7e6da25ea11

 ZeroCERT

45014 2021-05-26 17:40 PO 474050.xls  

8cd09ba1a0a1c52115e5419c92342708


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee 		10 20 4 3.4 M 34 ZeroCERT

45015 2021-05-26 15:18 origin.exe  

8270fec5a4b9cd84da15ab4b61e891ee


AgentTesla(IN) Malicious Packer .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.2 M 39 r0d

keyword