Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45406 2021-05-24 18:20 sIIpO8jjC02iQCT.exe  

3d9a120a83e330ab0f26454a46b9e1e7


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key
2.8 24 ZeroCERT

45407 2021-05-24 18:19 banh.exe  

8dc45cee87ca5370db8341c7755c8b9e


PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed
9.4 20 ZeroCERT

45408 2021-05-24 18:17 brazzz.exe  

011ef8c61ebdce09c170eff3311c4a0a


Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key
3.0 36 ZeroCERT

45409 2021-05-24 18:17 rYMtUTp556Z02qL.exe  

76c61f35c06b4d510bc59d3f8aa42fea


AsyncRAT backdoor PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key
2.0 8 ZeroCERT

45410 2021-05-24 18:15 vbc.exe  

c43ff70c1a60486bda3a8f005e5bf26f


PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed
10.2 40 ZeroCERT

45411 2021-05-24 18:15 YpB5uPa1YKwLPKt.exe  

5c8003788c729d9c9d6f91c62aef10f4


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key
2.2 23 ZeroCERT

45412 2021-05-24 18:14 bin---09.exe  

c2db9ae19f2ed393fb6ae0703dc30b2c


PWS .NET framework Malicious Packer AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself
17 18 1 9.4 30 ZeroCERT

45413 2021-05-24 18:13 aYnQ4B6WoQm6DuG.exe  

20afb202b5cfbb60dc7ff5f2509c3991


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key
2.8 21 ZeroCERT

45414 2021-05-24 18:11 bin.exe  

dbb0d24252b09d49478c336e5d0ec994


PWS .NET framework Malicious Packer AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
16 19 2 7.6 ZeroCERT

45415 2021-05-24 18:10 LluwMXf8ngOwqea.exe  

3517aa20f6e5641cd95afb5d9173e696


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key
2.8 22 ZeroCERT

45416 2021-05-24 17:28 run.exe  

63a11a44eeb7ee8c76f834d4435f4af3


GhostCringe GhostRAT PE File PE32 OS Processor Check Malware download VirusTotal Open Directory Malware GhostRAT AutoRuns Check memory Checks debugger Creates executable files RWX flags setting unpack itself Detects VMWare AntiVM_Disk sandbox evasion VMware VM Disk Size Check Windows Exploit Browser RAT Backdoor Trojan DNS crashed
2 1 9 1 9.0 M 48 guest

45417 2021-05-24 15:28 PicturesLab.exe  

02398f9746a8cdebb2bc1cb9ccb40e70


njRAT .NET EXE PE File PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself
2.2 M 53 r0d

45418 2021-05-24 15:14 I-Record.exe  

6f80701718727602e7196b1bba7fac1b


njRAT .NET EXE PE File PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself
2.2 M 52 r0d

45419 2021-05-24 15:12 f3kmkuwbdpgytdc5.exe  

ae4a8c201b070ee94488bb8862ed4ec5


njRAT Generic Malware .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself
1.8 M 36 r0d

45420 2021-05-24 15:03 f3kmkuwbdpgytdc5.exe  

ae4a8c201b070ee94488bb8862ed4ec5


Generic Malware .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself
1.8 M 36 r0d