popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45511 2021-05-18 09:19 file4.exe  

3795c43b2e06e15edb01a8a237243b08


AgentTesla PWS Loki[b] Loki[m] AsyncRAT backdoor .NET framework BitCoin browser info stealer Google Chrome User Data DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Code injection Http API Internet API Steal cr VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW IP Check Tofsee Windows ComputerName DNS crashed 		16 9 3 3 12.6 M 24 ZeroCERT

45512 2021-05-18 09:18 jooyu.exe  

aed57d50123897b0012c35ef5dec4184


Gen2 Emotet PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Malicious Traffic Check memory Creates executable files Check virtual network interfaces AppData folder IP Check Tofsee Browser RCE 		5 8 2 6.4 56 ZeroCERT

45513 2021-05-18 09:18 a7xsbjsf.zip  

afd9013de89b0b5ae549599c9afba03d


DLL PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself crashed 		1.4 10 ZeroCERT

45514 2021-05-18 09:14 lhtr7x1pv.zip  

283398a30cd7505b780c113d1838fc40


DLL PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself DNS crashed 		1.8 8 ZeroCERT

45515 2021-05-18 09:13 setup.exe  

b749832e5d6ebfc73a61cde48a1b890b


Process Kill PE File OS Processor Check PE32 Device_File_Check Browser Info Stealer VirusTotal Malware Malicious Traffic Check memory buffers extracted ICMP traffic Windows utilities suspicious process AppData folder anti-virtualization Windows Browser 		2 2 7.2 59 ZeroCERT

45516 2021-05-18 09:11 file1.exe  

7aadd46ba3b6e23aca20677ac281c03b


Glupteba PE File OS Processor Check PE32 PDB unpack itself Windows RCE crashed 		2.2 M ZeroCERT

45517 2021-05-18 09:09 file2.exe  

dba20ac697952657e4daee957e10a805


Raccoon Stealer Glupteba PE File OS Processor Check PE32 PDB unpack itself Windows RCE crashed 		2.0 M ZeroCERT

45518 2021-05-18 09:08 proof of payment.exe  

7238cb41274f63e1d5463d9259facb19


AsyncRAT backdoor PWS .NET framework SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS crashed 		10.8 34 ZeroCERT

45519 2021-05-18 09:07 n9yo6g3m.rar  

e5769bdf194b0a6369c0f58cc16e5a96


DLL PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself DNS crashed 		1.8 M 7 ZeroCERT

45520 2021-05-18 09:06 b9cmykxv6.tar  

0887cda7ee95f03a05cc7fa5d12ea1bc


DLL PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself crashed 		1.4 M 10 ZeroCERT

45521 2021-05-18 09:04 file5.exe  

723a3fc8d6faeefe3f6ac7eca0f56570


Anti_VM PE File PE32 VirusTotal Malware unpack itself Checks Bios Detects VirtualBox Detects VMWare VMware anti-virtualization Tofsee Windows ComputerName Firmware crashed 		2 1 5.2 M 25 ZeroCERT

45522 2021-05-18 09:03 mega.exe  

ffba772f9ca82656131883f57760fe1d


AgentTesla Gen1 Gen2 DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Code injection Http API Internet API Steal credential ScreenShot Downloader P2P AntiDebug AntiVM PE File PE32 PE64 DLL Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself suspicious process WriteConsoleW Tofsee Windows 		3 4 1 9.2 39 ZeroCERT

45523 2021-05-18 09:02 tuvomaq.exe  

524acaf48bdd42d49c4f6f485468bc67


PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege MachineGuid Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 7.4 ZeroCERT

45524 2021-05-18 09:00 C3b.exe  

edc4dc3947bcadc3039095321c71572a


Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 Malware download NetWireRC VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW BitRAT Windows ComputerName DNS DDNS keylogger 		2 1 13.6 48 ZeroCERT

45525 2021-05-18 09:00 INVOICE%20CONFIRMATION.exe  

47cb06b3265d633beef3831e2d9c73ff


Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Detects VirtualBox VMware anti-virtualization ComputerName DNS Software 		1 13.2 21 ZeroCERT

keyword