popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5851 2021-03-11 11:23 6.exe  

db2c2a71e4429b92ed1a4f44a79d7d55


VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Windows ComputerName DNS 		1 3 1 9.2 11 ZeroCERT

5852 2021-03-11 11:39 ADVER.exe  

a279d96f54af8224316ca660be94fcd5


VirusTotal Malware MachineGuid Malicious Traffic Checks debugger buffers extracted malicious URLs suspicious TLD Tofsee DNS 		1 3 2 4.0 M 50 ZeroCERT

5853 2021-03-11 11:42 purchase order.ace  

066a145f17781d7d10820e257a7cc899


VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		4.6 5 ZeroCERT

5854 2021-03-11 12:46 drwtsn.exe  

8f698e97051b2e33fc57cd5786b012d0


AsyncRAT backdoor VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs 		1 3 1 3.2 M 25 ZeroCERT

5855 2021-03-11 12:47 bacradronado.pdf.exe  

6a9b756ec8bc0c666fe77bc2a92a3fed

VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		8.6 M 19 ZeroCERT

5856 2021-03-11 13:25 dubi.exe  

12e66476395f8c1d0c457a7c13ae71df

VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		3.4 M 56 ZeroCERT

5857 2021-03-11 13:26 ENKEY-stub.exe  

241f227820d0eb08cac923371900d866


email stealer Download management info stealer Google Chrome User Data browser Win Trojan agentTesla AsyncRAT backdoor ftp Client Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed keylogger 		8.2 M 39 ZeroCERT

5858 2021-03-11 13:35 filename.exe  

02727fe935a761d930148ecc949f502d

VirusTotal Malware unpack itself Remote Code Execution 		2.6 24 ZeroCERT

5859 2021-03-11 13:36 finald1.exe  

e9edb5d631e298f02d2845088d72afb1

VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows DNS Cryptographic key crashed 		1 3 1 10.6 M 22 ZeroCERT

5860 2021-03-11 13:42 GetDataAVK.exe  

50803bdba827e6ae4600da26b5e81800


Google Chrome User Data browser info stealer Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB Check memory Checks debugger Creates executable files unpack itself AppData folder malicious URLs WriteConsoleW Browser Email 		5.4 M 47 ZeroCERT

5861 2021-03-11 13:43 dubi.exe  

12e66476395f8c1d0c457a7c13ae71df


Malicious Library VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		3.4 M 56 r0d

5862 2021-03-11 13:44 imyf.exe  

ec8b389edf6738f9b561418f4b0b0d9c

VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows DNS Cryptographic key crashed 		1 3 1 10.0 M 22 ZeroCERT

5863 2021-03-11 13:46 dubi.exe  

12e66476395f8c1d0c457a7c13ae71df


Raccoon Stealer Malicious Library VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		3.4 M 56 r0d

5864 2021-03-11 13:59 6.exe  

db2c2a71e4429b92ed1a4f44a79d7d55


Malicious Library VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Windows ComputerName 		1 3 1 8.2 M 29 r0d

5865 2021-03-11 14:44 imyf.exe  

ec8b389edf6738f9b561418f4b0b0d9c


UltraVNC VirusTotal Malware PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows Cryptographic key crashed 		2 3 1 1 10.4 M 22 r0d

keyword