popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45826 2021-04-30 18:12 IMG_0540001825.exe  

fd0e7153869bad651ae4ae4f1dbef3da


AsyncRAT backdoor AgentTesla AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer VirusTotal Malware malicious URLs Browser ComputerName crashed 		1 3.0 M 35 ZeroCERT

45827 2021-04-30 18:10 Szakur.exe  

6293b2f51ac52c926cfc5f87775a21fa


PWS Loki AsyncRAT backdoor .NET framework AgentTesla DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 8.0 M 32 ZeroCERT

45828 2021-04-30 18:08 svch.exe  

3722c9a2efe69886e53ef37bebcee669


Loki PE File PE32 DLL OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName Software 		1 2 7 1 8.2 M 19 ZeroCERT

45829 2021-04-30 18:06 templex.exe  

c37d480d603a248b0e230a1c15590266


SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		12.0 16 ZeroCERT

45830 2021-04-30 18:03 in6-4.doc  

ba4afb8bb89f4a8f103780c416ecdbdd


VBA_macro Antivirus MSOffice File VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key Downloader 		1 1 10.0 M 37 ZeroCERT

45831 2021-04-30 18:03 vbc.exe  

396fedf9bcc0ad02b69510c986131fd2


AsyncRAT backdoor PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS Cryptographic key crashed 		12.0 M 25 ZeroCERT

45832 2021-04-30 18:01 winlog.exe  

bab5165b972f2416ae964d7b79bd5ecf


Glupteba OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself Windows RCE crashed 		3.2 M 23 ZeroCERT

45833 2021-04-30 18:01 regasm.exe  

37207e8bd9430777ab0e27cf4a4fc26a


PWS Loki AsyncRAT backdoor Malicious Library DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 7 13.6 11 ZeroCERT

45834 2021-04-30 17:59 kayx.exe  

129e1d37b93430b4bd894b16c53cd6bc


AsyncRAT backdoor AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows crashed 		3 7 2 10.0 M 26 ZeroCERT

45835 2021-04-30 17:58 s.dot  

f62c1d955d66e2f33ed7f3abe9a44690


Loki RTF File doc AntiDebug AntiVM LokiBot Malware download VirusTotal Malware c&c MachineGuid Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		2 3 12 1 5.0 M 25 ZeroCERT

45836 2021-04-30 17:56 Project Korvus.exe  

e4cb6177f54802a8eb50817353622056


Ave Maria WARZONE RAT Antivirus OS Processor Check PE File PE32 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName RCE DNS Cryptographic key 		2 1 10.8 52 r0d

45837 2021-04-30 12:04 RaptoreumDigger.exe  

ddf9bb04a39bd8b450d6fb90a146df9c


AsyncRAT backdoor PE File OS Processor Check PE64 PDB MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key 		1.4 guest

45838 2021-04-30 09:48 divine11111.html  

2eeda876014265c8413ef0e565a96657


AntiDebug AntiVM PNG Format VBScript suspicious privilege MachineGuid Code Injection WMI wscript.exe payload download Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName Dropper 		33 19 1 1 10.0 M ZeroCERT

45839 2021-04-30 09:48 cutscroll.png  

f5c29728fe1f4226a8dc603d788a0a6f


PE File OS Processor Check PE32 Dridex TrickBot Malware suspicious privilege Malicious Traffic buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 2 3 4.6 ZeroCERT

45840 2021-04-30 09:47 Company Details.ppam  

c8e1760af8a65590d26315a4ff144b62


VBA_macro PNG Format VirusTotal Malware powershell AutoRuns Malicious Traffic Check memory buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Interception Windows ComputerName DNS 		15 16 1 8.6 15 ZeroCERT

keyword