popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
47896 2024-09-09 09:46 vrgeh.exe  

a8fef7b198fa122ead5bcf5b84f2737b


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 16.0 M 47 ZeroCERT

47897 2024-09-09 09:48 sgf.exe  

7e860c83b7eadf2a7a29532989114348


Client SW User Data Stealer ftp Client info stealer Antivirus Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself ComputerName 		7.6 M 45 ZeroCERT

47898 2024-09-09 09:50 66dcad8f5f33a_crypted.exe  

b8010780cbccba9ec2e20d7b3c17c6be


RedLine stealer Antivirus ScreenShot PWS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 10.2 M 44 ZeroCERT

47899 2024-09-09 09:56 Twitch x Loot Lab Event - 2025...  

41c656c497d7ec24de57a9927c13e81c


Antivirus ScreenShot KeyLogger AntiDebug AntiVM VirusTotal Malware MachineGuid Code Injection Check memory RWX flags setting unpack itself 		3.0 22 ZeroCERT

47900 2024-09-09 10:10 responsibilityleadpro.exe  

d1fd7bf0ef1ef17007005c4d86c27d03


Generic Malware Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		0.8 M 17 ZeroCERT

47901 2024-09-09 10:10 lemon.exe  

06316232a5c4476deffee5872b5a9c0f


Generic Malware Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		0.8 M 11 ZeroCERT

47902 2024-09-09 10:12 pclient.exe  

54d967f9eb61177beabd0c5c826fd4c6


Generic Malware Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		0.8 M 12 ZeroCERT

47903 2024-09-09 10:15 oclo.exe  

0d14677324fb1f05953aff5dfc889965


Generic Malware Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware crashed 		0.8 M 15 ZeroCERT

47904 2024-09-09 10:41 1.exe  

556a8b2afef96f81acde6ca1a525650e


Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself ComputerName 		2.6 49 ZeroCERT

47905 2024-09-09 10:45 lnef.exe  

1c3de51950332122d75feeca0eef8afe


Antivirus ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself ComputerName 		7.2 M 25 ZeroCERT

47906 2024-09-09 10:46 vjgg.exe  

3745160eac67b0511940bad6f7811903


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		2 5 3 1 15.4 M 41 ZeroCERT

47907 2024-09-10 09:51 66dd9bbd1c1b9_w2.exe#ww2metaki...  

8643394f91138d207dda09b2c98ed18e


RedLine stealer Malicious Library .NET framework(MSIL) PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 45 ZeroCERT

47908 2024-09-10 10:08 66df1683e162e_12.exe#d12  

317a685e8d63e4fa4d16876659095b82


Stealc Client SW User Data Stealer LokiBot ftp Client info stealer Antivirus Malicious Library Http API PWS HTTP Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 FTP Client Info Stealer VirusTotal Malware Telegram PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Collect installed applications suspicious process malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software 		1 5 3 1 16.2 M 31 ZeroCERT

47909 2024-09-10 10:11 66df29757fbee_def.exe#kisotr  

1a3ac0bc9af8e3b8cc72caaf6ba88b9f


Stealc Client SW User Data Stealer Gen1 ftp Client info stealer Generic Malware Antivirus Malicious Library UPX Malicious Packer Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar VirusTotal Malware c&c PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications suspicious process sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Stealc Stealer Windows Browser ComputerName DNS Software plugin 		9 3 18 2 14.8 M 32 ZeroCERT

47910 2024-09-10 10:12 66df29a06624c_cry.exe#kiscrypt...  

588da7a05fe6d237b82ea541c0e9d1cb


Stealc Client SW User Data Stealer ftp Client info stealer Antivirus Http API PWS AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware c&c PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Stealc ComputerName DNS 		2 1 1 2 9.2 M 33 ZeroCERT

keyword