popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7441 2021-04-21 10:09 chungx.exe  

10a4a298243992f740dcdc8431daea3b


PWS .NET framework browser info stealer Google Chrome User Data Generic Malware AsyncRAT backdoor Malicious Packer VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Disables Windows Security WriteConsoleW Windows DNS DDNS keylogger 		2 1 11.8 M 36 ZeroCERT

7442 2021-04-21 10:09 firewall.exe  

d76c5a676e641b431ac0a9dded9c505d


Malicious Packer PWS .NET framework Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself Disables Windows Security Windows DNS crashed 		10.2 ZeroCERT

7443 2021-04-21 10:11 vbc.exe  

603427541956128137111ebe540b11e5


Glupteba VirusTotal Malware PDB unpack itself Windows crashed 		3.0 41 ZeroCERT

7444 2021-04-21 10:12 prosperx.exe  

7f3fc7d086447a7e15e0d32bdd885cbc

FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder DNS 		3 8 1 6.0 M 22 ZeroCERT

7445 2021-04-21 10:13 ellawealthx.exe  

0389d0b86a7342d646fc52945033e0c3


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 1 2 14.0 M 17 ZeroCERT

7446 2021-04-21 10:14 vbc.exe  

074f128ce5b65e4a4476f2a94e8385a7


PWS .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		9.6 M 26 ZeroCERT

7447 2021-04-21 10:16 zeddd.exe  

b6e19d6eff5e92815130648f931b9425


Malicious Packer PWS .NET framework Buffer PE Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself Disables Windows Security Windows DNS crashed 		1 8.8 ZeroCERT

7448 2021-04-21 10:17 ........dot  

4f9a3ec99cb88fe8b6ad1b3f67b3ae25

FormBook Malware download VirusTotal Malware Malicious Traffic ICMP traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		17 23 7 5.2 26 ZeroCERT

7449 2021-04-21 10:18 winlog.exe  

e31802832554364edd0212a9dc61d0f5


PWS .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		5.6 13 ZeroCERT

7450 2021-04-21 10:21 jpfz.jpg  

c96265792aa13d624cc4cda1d3c0c257

VirusTotal Malware Check memory DNS crashed 		3.6 40 ZeroCERT

7451 2021-04-21 10:23 taskmgrs.exe  

d9667de328dbeef055555f0303914558


Malicious Packer PWS .NET framework suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS crashed 		11.4 ZeroCERT

7452 2021-04-21 10:25 msdtc.exe  

b4e7a9cdbd72320f2721c36fb21324f9

VirusTotal Cryptocurrency Miner Malware Cryptocurrency suspicious process WriteConsoleW DNS 		3.0 31 ZeroCERT

7453 2021-04-21 10:31 e8jxc.exe  

513e8c0b4eb8fe2e8c2f9887527334cd

VirusTotal Malware PDB Check memory unpack itself 		2.0 M 23 ZeroCERT

7454 2021-04-21 10:36 CamLiveSetup1.0.0.exe  

82ab12bcd6402e68ae9b1e3cff33699c


Emotet Gen1 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		56 22 2 6.2 14 ZeroCERT

7455 2021-04-21 13:25 mdQtJBe7.exe  

af08820a00cb5403b64415002825075d


PWS .NET framework AsyncRAT backdoor VirusTotal Malware DNS DDNS 		3 2 3.2 43 guest

keyword