popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45601 2021-04-30 09:48 divine11111.html  

2eeda876014265c8413ef0e565a96657


AntiDebug AntiVM PNG Format VBScript suspicious privilege MachineGuid Code Injection WMI wscript.exe payload download Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName Dropper 		33 19 1 1 10.0 M ZeroCERT

45602 2021-04-30 09:48 cutscroll.png  

f5c29728fe1f4226a8dc603d788a0a6f


PE File OS Processor Check PE32 Dridex TrickBot Malware suspicious privilege Malicious Traffic buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 2 3 4.6 ZeroCERT

45603 2021-04-30 09:47 Company Details.ppam  

c8e1760af8a65590d26315a4ff144b62


VBA_macro PNG Format VirusTotal Malware powershell AutoRuns Malicious Traffic Check memory buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Interception Windows ComputerName DNS 		15 16 1 8.6 15 ZeroCERT

45604 2021-04-30 09:41 redbutton.png  

79f0f44a27a3d1bdc7cdd7e7c248fb29


PE File OS Processor Check PE32 Dridex TrickBot Malware suspicious privilege Malicious Traffic buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 4 2 7.0 ZeroCERT

45605 2021-04-30 09:38 HBankers_Latest.hta  

4324831d87b2b6e82e60406c4d07b42c


Antivirus AntiDebug AntiVM MSOffice File VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut exploit crash unpack itself Windows utilities powershell.exe wrote suspicious process Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		1 2 8.8 4 ZeroCERT

45606 2021-04-30 09:36 8BmVIdYzvSw7AD3.exe  

063f5233e489e4b13c2fcc62e1750705


PWS .NET framework AsyncRAT backdoor Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		12.0 M 27 ZeroCERT

45607 2021-04-30 09:33 280421-z1z.exe  

2699077a996951eac7b369b6356ff296


PE File OS Processor Check PE32 VirusTotal Malware unpack itself RCE 		2 2.0 20 ZeroCERT

45608 2021-04-30 09:32 HBankers_Latest.hta  

4324831d87b2b6e82e60406c4d07b42c

VirusTotal Malware crashed 		3 0.6 4 ZeroCERT

45609 2021-04-30 09:31 reg.dot  

d0c491b8eb3ea8f00a93af05ef1b8945


AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		3 1 6 5.2 M 27 ZeroCERT

45610 2021-04-30 09:31 s68r0hZ49vns9tk.exe  

081bff782d62aebc69b61009e6000ab8


PWS .NET framework Malicious Packer SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName crashed 		11.6 M 23 ZeroCERT

45611 2021-04-30 09:24 5bef7b39fe02eabea2c02612758762...  

6f203feba292f1322dae52e76dbf4ce4


VBA_macro VirusTotal Malware Malicious Traffic unpack itself DNS 		3 3.6 M 4 ZeroCERT

45612 2021-04-30 09:17 tgixx.exe  

318f4d702f97b8d7fbc1a1fddfab81ae


Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS 		9.2 5 ZeroCERT

45613 2021-04-30 09:15 vbc.exe  

44fd8894c4e507cafa1c767995dd8927


PWS Loki .NET framework AsyncRAT backdoor Malicious Library DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Trojan DNS Cryptographic key Software 		1 2 10 1 14.6 M 7 ZeroCERT

45614 2021-04-30 09:13 netmount.dll  

3f3cb269876273534664a5d37118de14


PE File DLL PE32 Dridex TrickBot VirusTotal Malware suspicious privilege Malicious Traffic Checks debugger buffers extracted unpack itself Check virtual network interfaces Kovter ComputerName DNS crashed 		1 4 3 5.8 M 24 ZeroCERT

45615 2021-04-30 09:12 986758_IUX.msi  

ea5b0a11238124c6fc78dd72a7bb2401


Gen2 OS Processor Check MSOffice File VirusTotal Malware DNS crashed 		1.2 9 ZeroCERT

keyword