popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49021 2021-02-04 10:52 416212.jpg.exe  

5210f2b1dea41fc2209ca7dccb4ec172

 0.2 M ZeroCERT

49022 2021-02-04 10:52 541310.jpg.exe  

ac7d58bf24cbc2083fe4a90f203c9ab5


RCE 		0.8 M ZeroCERT

49023 2021-02-04 10:14 6lajhbjyuk.exe  

77be0dd6570301acac3634801676b5d7


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Check memory ICMP traffic Collect installed applications malicious URLs sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Browser ComputerName DNS Software 		1 4 1 10.8 M 59 ZeroCERT

49024 2021-02-04 10:14 winlog.exe  

339fedf77e466d75dc3d7197fafa2ac3


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion installed browsers check Browser Email ComputerName Software 		1 2 7 10.0 M 48 ZeroCERT

49025 2021-02-04 09:59 vbc.exe  

2ffc43d9e4d2482e7acfdcef863fe7e9


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs WriteConsoleW Windows DNS Cryptographic key 		4 10 10.0 M 31 ZeroCERT

49026 2021-02-04 09:59 UDI.exe  

103a67077a7c6f4efd59a2042168f08b


VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 3.8 M 24 ZeroCERT

49027 2021-02-04 09:46 svchost.exe  

c69a6a5f930af087691a861a2ba904eb


Dridex VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS 		1 2 5 11.0 M 17 ZeroCERT

49028 2021-02-04 09:45 TEMP.so.exe  

f160c057fded2c01bfdb65bb7aa9dfcc


Malware download Amadey VirusTotal Malware Malicious Traffic Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS 		1 1 1 1 6.8 M 56 ZeroCERT

49029 2021-02-04 09:40 bb.exe  

2668dde5e520194c26a7dd49d1aab364


VirusTotal Malware AutoRuns Creates executable files malicious URLs sandbox evasion Windows RCE DNS 		1 7.4 M 57 guest

49030 2021-02-04 09:37 new.exe  

fea1df2cdbc8ed9c6a82bcce20402a0a


VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		2 1 12.8 M 10 ZeroCERT

49031 2021-02-04 09:37 MLY.exe  

3c9be33d1fd95c74f800e570cd4654eb


VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW human activity check Windows ComputerName Cryptographic key crashed 		2 14.4 M 28 ZeroCERT

49032 2021-02-04 09:20 lv.exe  

5d2f84a7e74e6e5ff1db4c4038d0f5e4


VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check Tofsee Windows ComputerName crashed 		2 4 2 13.8 M 46 ZeroCERT

49033 2021-02-04 09:19 mannx.scr  

87a960f2e2706c501193fbf3266b9ea9


Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 3 1 1 14.0 M ZeroCERT

49034 2021-02-03 18:51 light.exe  

3722074c541640dafeaf62c0e12080c0


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		11.4 M 10 ZeroCERT

49035 2021-02-03 18:50 licenser.txt.exe  

63e7beb498ebe532263c977d71f664c3


VirusTotal Malware Buffer PE Check memory buffers extracted Creates executable files unpack itself AppData folder malicious URLs crashed 		4.8 M 16 ZeroCERT

keyword