popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45496 2021-05-18 16:20 27364cdfec04f571117b8425e85134...  

a1acc4e7065d4eb28cdf9e85973cba16


Generic Malware PE File OS Processor Check PE32 PE64 DLL GIF Format VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself AppData folder AntiVM_Disk sandbox evasion IP Check VM Disk Size Check 		3 8 1 8.4 M 37 r0d

45497 2021-05-18 10:13 SunLabsPlayer.exe  

8639e05b36f6a6ecbc33e819d3654daa


Gen1 Antivirus Anti_VM PE File PE32 DLL PNG Format PE64 OS Processor Check GIF Format powershell suspicious privilege Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote suspicious process AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Windows Browser ComputerName Cryptographic key 		1 2 10.0 ZeroCERT

45498 2021-05-18 10:08 cvhost.exe  

5db833b014cd9a4b96d3e780543eaea6


Glupteba PE File OS Processor Check PE32 PDB unpack itself Windows RCE DNS crashed 		2.8 ZeroCERT

45499 2021-05-18 09:57 CBCbrowser.exe  

5cdf8ce1bcc26bf8473f09447cfa0c47


AsyncRAT backdoor PWS .NET framework BitCoin AntiDebug AntiVM .NET EXE PE File PE32 MSOffice File Browser Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Cryptographic key crashed 		5 8 2 12.8 M ZeroCERT

45500 2021-05-18 09:56 diagram-58392516.xls  

3e58b8987074c6d6b6725e2cbdb0494d


MSOffice File VirusTotal Malware Check memory unpack itself Tofsee crashed 		5 8 2 3.0 15 guest

45501 2021-05-18 09:56 27364cdfec04f571117b8425e85134...  

a1acc4e7065d4eb28cdf9e85973cba16


PE File OS Processor Check PE32 PE64 DLL GIF Format VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion IP Check DNS 		3 7 2 8.4 M 26 ZeroCERT

45502 2021-05-18 09:56 diagram-58895225.xls  

16ec6ae1941a5f788d18aa6673be5fee


MSOffice File VirusTotal Malware Check memory unpack itself Tofsee crashed 		2 2 2.6 15 guest

45503 2021-05-18 09:56 diagram-58650286.xls  

a8f34f2a8de7b470c474c50c8cd4b15f


MSOffice File VirusTotal Malware Check memory unpack itself Tofsee DNS crashed 		2 3 2 3.2 15 guest

45504 2021-05-18 09:55 diagram-553418662.xls  

62c064e08d3aef1d97e64068583345d1


MSOffice File Check memory unpack itself Tofsee crashed 		2 2 2 2.0 guest

45505 2021-05-18 09:38 Trinity-Miner_1.exe  

3db9825a26cbb1f4bffd62194c5c52cc


AsyncRAT backdoor .NET EXE PE File OS Processor Check PE32 PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself Auto service Check virtual network interfaces Windows ComputerName Firmware DNS 		2 6.6 M 49 ZeroCERT

45506 2021-05-18 09:38 Optimize.facebook.ads.exe  

a5292f2ae50ae5ca63dd1ae659548c28


PE File OS Processor Check PE32 VirusTotal Malware Check memory unpack itself crashed 		2.4 35 ZeroCERT

45507 2021-05-18 09:28 Setup2.exe  

46fcb8a8f7db4f6e098f1213b1955498


Gen2 Emotet Glupteba VMProtect PE File PE32 DLL GIF Format OS Processor Check Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion IP Check VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName DNS crashed 		7 13 3 12.6 47 ZeroCERT

45508 2021-05-18 09:27 customer2.exe  

6d7603e4fd4d633cae7eaee0f1029a17


Gen2 Emotet PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Malicious Traffic Check memory Creates executable files Check virtual network interfaces AppData folder IP Check Tofsee Browser RCE 		4 6 2 6.4 M 59 ZeroCERT

45509 2021-05-18 09:24 app.exe  

49dd88ce21471d18eb1048358a37ab98


Glupteba PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows RCE crashed 		3.0 24 ZeroCERT

45510 2021-05-18 09:23 toolspab2.exe  

eb3585c3f3e6b3b7ac66c9a41724534b


Glupteba PE File OS Processor Check PE32 PDB unpack itself Windows RCE DNS crashed 		1 2.4 ZeroCERT

keyword