Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49201 2021-01-22 00:21 win32.exe  

1931f5b75ae8d9c14ec61cdd53e70f21


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs DNS
22 24 10.2 M 24 ZeroCERT

49202 2021-01-22 00:21 vbc3.exe  

e09c5be82b79d79dc377271d67f92a89


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software
1 2 7 13.2 M 27 ZeroCERT

49203 2021-01-22 00:10 vbc.exe  

e9ccfae9cb025410406a12538137c69f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities AppData folder malicious URLs Windows
4 16 13.0 M 38 ZeroCERT

49204 2021-01-22 00:09 vbc2.exe  

0705cb1278a79218eec9badca52ab8b3


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software
1 2 4 13.2 M 20 ZeroCERT

49205 2021-01-22 00:05 TaAgente.exe  

4cb563bf89a0407ba573f86a2f2a2030


VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Windows Cryptographic key
2 3 4.8 M 26 ZeroCERT

49206 2021-01-22 00:02 svchost.exe  

5aeb0da76f99119932bf52c3eb8b0767


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs
28 26 9.8 M 31 ZeroCERT

49207 2021-01-22 00:00 obo.exe  

1965c283581daeb2fc16e26de73839aa


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS crashed
10.4 M 31 ZeroCERT

49208 2021-01-21 23:55 9EGOH1YVZN.doc  

d955a8e1fdaa16e64dbe51f6ce642939


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS
1 3 3 1 5.2 M 22 ZeroCERT

49209 2021-01-21 23:53 yWL7cRcL.dll  

db6b1b751143235793c97e2060753b03


VirusTotal Malware
1.4 M 45 ZeroCERT

49210 2021-01-21 23:18 VN0UBI.doc  

f478137e6d85859bc62b73a9bd3a1e98


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS
1 3 3 1 5.2 M 21 ZeroCERT

49211 2021-01-21 23:17 Y33RPKU5M4WHOHFC.doc  

7836472c87f92110ca1826ee3c1f813f


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS
1 3 3 1 5.2 M 22 ZeroCERT

49212 2021-01-21 22:40 rLTjQ3s2GkCn.dll  

782f98c00905f1b80f0dfc6dc287cd6e


VirusTotal Malware
1.4 M 47 ZeroCERT

49213 2021-01-21 22:40 raeigb8.rar.exe  

4b0e1750691b96e97f20da52f7d7032c


VirusTotal Malware PDB unpack itself
2.0 M 11 ZeroCERT

49214 2021-01-21 21:25 picture.png.exe  

9b91667fa9c2e2a6bd1db04ca36558bb


Dridex TrickBot Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Kovter Windows ComputerName RCE DNS crashed
1 7 1 14.0 ZeroCERT

49215 2021-01-21 21:22 oosAm1N4UOgKvVubJ.dll  

782f98c00905f1b80f0dfc6dc287cd6e


VirusTotal Malware
1.2 M 31 ZeroCERT