popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5266 2021-02-18 22:19 regasm.exe  

a3ea851c219595231607114885c09413


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 10.8 M 39 ZeroCERT

5267 2021-02-18 22:22 setup.exe  

708cf56061b75db614bd5ce9ebff2c75


VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check installed browsers check Tofsee Windows Browser ComputerName crashed 		8 4 1 12.6 M 28 ZeroCERT

5268 2021-02-18 22:22 slim.exe  

f0dc88bce28dcc9005164930e94eacd6


VirusTotal Malware suspicious privilege Code Injection Checks debugger buffers extracted unpack itself 		6.8 M 50 ZeroCERT

5269 2021-02-18 22:27 UyHosminFeb2.exe  

07f3ee1b4354031f89d96955e7917ea7


VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns Check memory unpack itself Auto service suspicious process malicious URLs sandbox evasion Windows Browser ComputerName crashed 		1 4 1 8.6 M 48 ZeroCERT

5270 2021-02-18 22:29 slim.exe  

f0dc88bce28dcc9005164930e94eacd6


FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself DNS 		26 28 1 8.6 M 50 ZeroCERT

5271 2021-02-18 23:38 VTY.exe  

3afbff763b9b7c1d7ee7c7d99ea33bb2


VirusTotal Malware RWX flags setting unpack itself anti-virtualization 		2.2 M 26 ZeroCERT

5272 2021-02-18 23:43 W5o0qEYvyipy0ld.exe  

c6744a569048af543f110f79542e23a7


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself malicious URLs 		4.0 M 22 ZeroCERT

5273 2021-02-18 23:46 waki.jpg.exe  

c23cd3266f9085ba12e269d4ddc79fc2


FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion DNS 		26 26 1 6.8 M 25 ZeroCERT

5274 2021-02-19 09:15 WAQ.exe  

bdfdc1f12e34b9ec4877c30f32c0947f


VirusTotal Malware RWX flags setting unpack itself 		2.0 M 44 ZeroCERT

5275 2021-02-19 09:15 winlog.exe  

464dad78f117c78acf3dbc4da0afeacc


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		2 7 10.8 M 39 ZeroCERT

5276 2021-02-19 09:19 x3t5n6rofkRBJYo.exe  

3b0f7e6a0e98a28fc8f8e9cff739ff0a


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself 		3.2 M 21 ZeroCERT

5277 2021-02-19 09:21 winlog2.exe  

8a497c5c9117e49aca17d4daed692816


FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion DNS 		20 22 1 7.4 M 25 ZeroCERT

5278 2021-02-19 09:26 yygg.exe  

3ef3395f97eaeebe5c6cf07594402606


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself 		3.2 M 26 ZeroCERT

5279 2021-02-19 09:42 123.exe  

37514775ce8c353351766d3c63bbe20a


Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency buffers extracted unpack itself sandbox evasion installed browsers check Stealer Browser ComputerName DNS crashed 		1 1 4.8 M 29 ZeroCERT

5280 2021-02-19 09:44 10.fbr.exe  

853c5f48616fd2afd63e487d197c9796


Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted ICMP traffic RWX flags setting unpack itself Check virtual network interfaces malicious URLs Kovter ComputerName Remote Code Execution DNS crashed 		7 8 9.8 M 15 ZeroCERT

keyword