popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45571 2021-05-13 16:03 easyon-1.exe  

a0b256269745ce17a7782647a66c9428


Emotet PE File PE32 DLL PE64 OS Processor Check Malware download Dridex Malware AutoRuns PDB suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities AntiVM_Disk sandbox evasion WriteConsoleW Firewall state off VM Disk Size Check Windows RCE 		16 4 3 8.4 guest

45572 2021-05-13 11:02 v.exe  

fa85dccdc26f4e37e751e644864e27e2


PWS .NET framework Malicious Packer DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		2 1 12.8 M 20 ZeroCERT

45573 2021-05-13 11:00 b.exe  

1e21969ef30c0484bd1b9aaef1f16907


PWS .NET framework email stealer Malicious Packer DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted unpack itself AntiVM_Disk VM Disk Size Check Windows DNS 		1 10.0 M 24 ZeroCERT

45574 2021-05-13 10:58 docsc.exe  

457b22da77d4db093a31dd80a4b8963f


AsyncRAT backdoor Malicious Library DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Cryptographic key 		9.6 M 34 ZeroCERT

45575 2021-05-13 10:57 svchost.exe  

2edb5a087966f25f972506500a48c9f3


AsyncRAT backdoor Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process Windows ComputerName DNS Cryptographic key 		10.8 M 36 ZeroCERT

45576 2021-05-13 10:08 robopac.exe  

0a2f3448bf0077279f98a5d9f2751d9c


PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself 		2.0 31 ZeroCERT

45577 2021-05-13 09:58 image.exe  

906c90c5a321e9d087056a07d6dff929


AsyncRAT backdoor email stealer Malicious Library DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 12.2 M 21 ZeroCERT

45578 2021-05-13 09:57 wzreporteditor.rar  

888c0a23a36025b29da51f002f458234


Escalate priviledges KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself DNS 		3.4 M 50 ZeroCERT

45579 2021-05-13 09:46 update201703280212.exe  

3ccd1b5d4ea318d18cde4f03a6624679


UPX PE File PE32 VirusTotal Malware Check memory unpack itself RCE 		2.8 M 27 r0d

45580 2021-05-13 09:44 update201703280212.exe  

3ccd1b5d4ea318d18cde4f03a6624679


UPX PE File PE32 VirusTotal Malware Check memory unpack itself RCE 		2.8 M 27 r0d

45581 2021-05-13 08:26 update201703280212.exe  

3ccd1b5d4ea318d18cde4f03a6624679


PE File PE32 UPX VirusTotal Malware Malicious Traffic unpack itself Tofsee Windows RCE DNS 		3 4 4 4.4 M 27 ZeroCERT

45582 2021-05-13 08:23 Asyn_gracet.exe  

a111a4a9058473075bea557a2ff2dfd6


AsyncRAT backdoor PWS .NET framework Malicious Library .NET EXE OS Processor Check PE File PE32 Malware download AsyncRAT Dridex NetWireRC TrickBot VirusTotal Malware Kovter DNS DDNS 		2 3 1.6 46 ZeroCERT

45583 2021-05-13 08:23 kn.exe  

167f0a829df709cc4107369ed23fbdfb


Malicious Library DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Tofsee Windows ComputerName DNS DDNS 		2 5 4 16.6 31 ZeroCERT

45584 2021-05-13 08:23 XNAFrameworkClassLibrary.pdf  

eac4870e667458a95da0b52ed6457331


AsyncRAT backdoor DLL PE File .NET DLL PE32 VirusTotal Malware PDB 		1.2 23 ZeroCERT

45585 2021-05-13 08:21 knnnn.exe  

62e8b40ed70c64fbd25a070a0c8b78f7


PWS Loki[b] Loki[m] AsyncRAT backdoor Malicious Library DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 6 13.2 M 19 ZeroCERT

keyword