popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45421 2021-05-24 11:38 222333.exe  

d213c25eb7528fbc07f48fb9c151f0ed


Generic Malware PE File PE32 VirusTotal Malware Check memory Creates executable files RWX flags setting AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		2 6.0 M 52 r0d

45422 2021-05-24 09:22 222333.exe  

d213c25eb7528fbc07f48fb9c151f0ed


PE File PE32 VirusTotal Malware Check memory Creates executable files RWX flags setting AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		2 6.0 M 52 ZeroCERT

45423 2021-05-24 09:18 wnspxzq@_27899.exe  

9d24f3afa9e996bb1d87fbf12263c53f


Emotet PE File PE32 PNG Format VirusTotal Malware buffers extracted ICMP traffic unpack itself sandbox evasion Browser RCE 		5 4 5.8 M 31 ZeroCERT

45424 2021-05-24 09:17 ehn410274214523502210vlbxohwp4  

bc5d3090b4ec7ece19ce132d14c0e111


VBA_macro MSOffice File VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		8 14 3 4.4 M 41 ZeroCERT

45425 2021-05-23 17:40 ALL.txt  

a140c5bb18fc4adb4a2f5d2a907de048


Antivirus VirusTotal Malware unpack itself WriteConsoleW Windows DNS Cryptographic key 		1.8 1 ZeroCERT

45426 2021-05-23 17:40 f3kmkuwbdpgytdc5.exe  

ae4a8c201b070ee94488bb8862ed4ec5


.NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 M 36 ZeroCERT

45427 2021-05-23 17:38 I-Record.exe  

6f80701718727602e7196b1bba7fac1b


.NET EXE PE File PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		2.8 M 52 ZeroCERT

45428 2021-05-23 17:38 PicturesLab.exe  

02398f9746a8cdebb2bc1cb9ccb40e70


.NET EXE PE File PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 M 53 ZeroCERT

45429 2021-05-23 17:31 ALL.txt  

a140c5bb18fc4adb4a2f5d2a907de048

VirusTotal Malware Check memory RWX flags setting unpack itself DNS 		2.0 1 ZeroCERT

45430 2021-05-23 17:12 Server.txt  

68a0c1efdcd6fa5a6f08327b40afa394


Anti_VM ScreenShot AntiDebug AntiVM VirusTotal Malware Check memory unpack itself DNS 		2.0 3 ZeroCERT

45431 2021-05-23 10:55 Setup.exe  

d69ad8d2f432e57d4f5ecf5d7e7f9300


Emotet AsyncRAT backdoor PWS .NET framework Gen1 Glupteba BitCoin Generic Malware Anti_VM VMProtect AntiDebug AntiVM PE File PE32 DLL .NET DLL .NET EXE GIF Format OS Processor Check PE64 Browser Info Stealer VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion VMware IP Check VM Disk Size Check installed browsers check Tofsee Ransomware GameoverP2P Zeus Windows Browser ComputerName Trojan Banking Amazon DNS Cryptographic key crashed keylogger 		28 39 10 3 25.2 M 35 ZeroCERT

45432 2021-05-23 10:46 kakashi_cry.exe  

62c59ba0375eebf49b4d80c290e69646


AsyncRAT backdoor PWS .NET framework .NET EXE PE File PE32 Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process Tofsee Windows 		1 3 1 6.4 ZeroCERT

45433 2021-05-23 10:23 att.exe  

a119eaea434c7e0c58663c605e9c0ac6


Raccoon Stealer Glupteba PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows crashed 		2.8 21 ZeroCERT

45434 2021-05-23 10:23 index.exe  

21f942eb973340f0b1948d929ff5fc6e


PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows DNS Cryptographic key 		10.6 M 41 ZeroCERT

45435 2021-05-23 10:23 hbggg.exe  

e6f6fd13001b8df1af345df56caba5de


Gen2 Emotet PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Malicious Traffic Check memory Creates executable files Check virtual network interfaces AppData folder IP Check Tofsee Browser RCE DNS 		5 8 2 2 7.0 M 50 ZeroCERT

keyword