popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45046 2021-05-31 11:05 ao.exe  

b1d319888860b7a6400c5e5099d59e48


Amadey PWS Loki[b] Loki[m] Admin Tool Sysinternals Antivirus HTTP Code injection Http API Internet API AntiDebug AntiVM PE File .NET EXE PE32 DLL JPEG Format Malware download Amadey FTP Client Info Stealer ENERGETIC BEAR VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote suspicious process AppData folder sandbox evasion WriteConsoleW Windows Email ComputerName DNS Cryptographic key Software crashed 		3 1 5 20.2 M 45 r0d

45047 2021-05-31 09:37 Ls_Droid_v1.1.9.0.exe  

a1459b6cd648d10da05707b69166d2f6


Anti_VM .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Tofsee Windows Firmware crashed 		1 3 1 9.2 M 31 ZeroCERT

45048 2021-05-31 09:35 jaja.exe  

54262706e573614d224fec09edb4f7cf


Malicious Library Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		16.2 46 ZeroCERT

45049 2021-05-31 09:32 new.exe  

03abf4527d2c88e4716e194e93c9b07b


AsyncRAT backdoor PWS .NET framework AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.8 40 ZeroCERT

45050 2021-05-31 09:32 ccsetup579.exe  

195eecffa8cb3f26eb11eb4aa379eaf6


AsyncRAT backdoor Antivirus DNS Socket HTTP Code injection Http API Internet API ScreenShot Downloader AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process AppData folder Windows ComputerName Cryptographic key crashed 		10.4 M 42 ZeroCERT

45051 2021-05-31 09:31 NmX.txt.html  

f69a35821e442a111ebbe08c7fc22060


Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key 		4 2 6.8 17 ZeroCERT

45052 2021-05-31 09:31 al.exe  

52abd9b0522751f14763b92baf4afa37


NPKI Antivirus PE64 PE File VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		7.4 36 ZeroCERT

45053 2021-05-31 09:21 filename.exe  

6196cc4ad4f0a19ace433c987b0fc94a


Generic Malware Malicious Packer PE File OS Processor Check PE32 PDB unpack itself Windows RCE crashed 		2.4 ZeroCERT

45054 2021-05-31 09:21 clip.exe  

24b6fa846f9d1e068e55654ab7ab451b


Malicious Library PE File PE32 OS Processor Check DLL VirusTotal Malware Check memory Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		5.4 M 56 ZeroCERT

45055 2021-05-31 09:19 ao.exe  

b1d319888860b7a6400c5e5099d59e48


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 45 ZeroCERT

45056 2021-05-31 09:19 drunk.exe  

3b053dc6b2a1fd69b96cde6a7d320034


AsyncRAT backdoor PWS .NET framework .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check ComputerName DNS crashed 		1 3 1 6.6 M 55 ZeroCERT

45057 2021-05-31 09:17 google.bat  

362fbb934eb02fbb301049a2bce6eac9


AgentTesla Antivirus DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Code injection Http API Internet API Steal credential ScreenShot Downloader P2P AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		5.0 1 ZeroCERT

45058 2021-05-31 09:17 bmw1.exe  

05b5c49112ebf3d93b737c5540a28faa


Generic Malware Malicious Packer PE File OS Processor Check PE32 PDB unpack itself Windows RCE DNS crashed 		3.0 ZeroCERT

45059 2021-05-28 16:47 D3q0V9hldAyJ1xR.exe  

3206c82d7448508708770a5537362024


PWS .NET framework .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.4 29 ZeroCERT

45060 2021-05-28 16:45 bmw1.exe  

6387d9c50daa7741006fbe72cf0ee048


Generic Malware Malicious Library Malicious Packer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows crashed 		2.6 24 ZeroCERT

keyword