popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5401 2021-02-24 09:59 NewOrder.exe  

6dd83e20f43a9bd2e136fcd77131f7e4


VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.4 M 30 ZeroCERT

5402 2021-02-24 09:59 PCkeiTarv6iiGIr.exe  

208aa1d897aa53ff9fe71cf3d3e9ddcd


VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 M 26 ZeroCERT

5403 2021-02-24 10:11 regasm.exe  

a34368a13cf3838ff8860de92e688ef9


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion installed browsers check Browser Email ComputerName Software 		1 2 7 1 9.8 M 31 ZeroCERT

5404 2021-02-24 10:11 tnf.exe  

e48ba1147b75508b7f58cace584373cb


VirusTotal Malware unpack itself Remote Code Execution DNS 		3.4 M 47 ZeroCERT

5405 2021-02-24 12:17 v.exe  

fac509b5175d3647945bdbf7ac010acc


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		7.8 M 26 ZeroCERT

5406 2021-02-24 12:18 update-22.exe  

eb332fd9cc8be8e6a60d4ff9c5f5fcf7


Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications AppData folder malicious URLs suspicious TLD WriteConsoleW anti-virtualization installed browsers check Windows Browser Trojan DNS Software 		2 2 3 16.0 M 33 ZeroCERT

5407 2021-02-24 19:22 VOP.exe  

d7e81abce9332847471b89e50b241172


VirusTotal Malware 		1.2 M 47 ZeroCERT

5408 2021-02-24 19:23 vbc.exe  

ddd12f311426d418e5e017ad76941dbb


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Tofsee Windows Browser Email ComputerName DNS Software 		3 4 11 1 11.0 M 48 ZeroCERT

5409 2021-02-24 19:28 2200.dll  

8478376cc9f6f4143330e13a29910e0e


VirusTotal Malware PDB unpack itself 		1.8 M 28 ZeroCERT

5410 2021-02-24 19:32 winlog.exe  

f10054d325df455c58ecb16ea660d3f2


FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder malicious URLs sandbox evasion Windows 		26 25 1 9.0 M 48 ZeroCERT

5411 2021-02-24 20:25 alfile.exe  

fd916b27fb57ad76c767e6753d7f68ed


VirusTotal Malware unpack itself 		2.4 M 49 ZeroCERT

5412 2021-02-24 20:28 cosz.exe  

f4318c74d987c8ad1f3030f7589accdf


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		8.4 M 34 ZeroCERT

5413 2021-02-24 20:30 crypt_MC.exe  

da82741efad64eea568ae23f173cfbd7


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Checks Bios Detects VMWare Check virtual network interfaces AppData folder malicious URLs VMware anti-virtualization Tofsee Windows Firmware DNS crashed 		7 8 1 10.8 M 44 ZeroCERT

5414 2021-02-24 20:32 cosz.exe  

f4318c74d987c8ad1f3030f7589accdf


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed 		12.0 M 34 ZeroCERT

5415 2021-02-25 09:14 embarf.point.exe  

884dab96c679194fc5140322d5ce9e9d


VirusTotal Malware Checks debugger unpack itself 		2.4 M 39 ZeroCERT

keyword