popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7711 2021-04-28 18:31 IMG_88134.exe  

4d0b19cd29e6c8ce724607b85771de8d


AsyncRAT backdoor Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 5 3 2 18.2 M 17 ZeroCERT

7712 2021-04-29 07:19 Startup%20Host.exe  

8b6cf8530332474edbdec4dd82292a02


PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself suspicious process WriteConsoleW Windows DNS Cryptographic key 		3.6 14 ZeroCERT

7713 2021-04-29 07:27 vbc.exe  

9644a199c0d74c2f223b042b93899333


Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11.4 21 ZeroCERT

7714 2021-04-29 07:27 chrome.exe  

9a802cbec55102eee639f4f3034e452f


Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Checks debugger buffers extracted exploit crash unpack itself malicious URLs Windows Exploit Cryptographic key crashed 		10.4 21 ZeroCERT

7715 2021-04-29 07:30 m.dot  

b733cd69833b58ee8e56e8ca6212966b


AntiDebug AntiVM Malware download Malware MachineGuid Malicious Traffic Check memory exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 6 4.0 ZeroCERT

7716 2021-04-29 09:03 AnnualReport.exe  

7908cc9996b7423c766157d8119df254


Antivirus PE File PE32 OS Processor Check VirusTotal Malware powershell PDB suspicious privilege Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName Remote Code Execution DNS Cryptographic key 		7.0 M 27 ZeroCERT

7717 2021-04-29 09:04 FLP_5012_306_171.exe  

a746c90dae245470777071a6c41dea07


KeyBase AgentTesla Gen1 AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Check JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Phishing Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Malicious Traffic Check memory WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check OskiStealer Stealer Windows Browser Email ComputerName Password 		9 2 6 12.0 22 ZeroCERT

7718 2021-04-29 09:05 6fsjd89gdsug.exe  

77be0dd6570301acac3634801676b5d7


Ficker Stealer PE File PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Check memory ICMP traffic Collect installed applications sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Stealer Browser ComputerName DNS Software 		1 4 3 9.4 M 56 ZeroCERT

7719 2021-04-29 09:23 4.html  

a5b6964b3df390bbc68275fae8aacf51

VirusTotal Malware crashed 		0.8 15 ZeroCERT

7720 2021-04-29 09:24 svch.exe  

372f96b73c0ff71825a027aca714dc7b


Socket PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE32 PE File DNS AsyncRAT backdoor Loki Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Trojan DNS Cryptographic key Software 		1 2 10 1 13.8 M 23 조광섭

7721 2021-04-29 09:27 4.html  

a5b6964b3df390bbc68275fae8aacf51


AntiDebug AntiVM Antivirus VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key 		3 2 1 12.2 15 ZeroCERT

7722 2021-04-29 09:33 svch.exe  

372f96b73c0ff71825a027aca714dc7b


Socket PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE32 PE File DNS AsyncRAT backdoor Loki Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Trojan DNS Cryptographic key Software 		1 2 10 1 12.8 M 23 조광섭

7723 2021-04-29 09:37 svch.exe  

372f96b73c0ff71825a027aca714dc7b


PWS Loki .NET framework AsyncRAT backdoor Malicious Library DNS Socket AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Trojan DNS Cryptographic key Software 		1 2 10 1 12.8 M 23 조광섭

7724 2021-04-29 10:03 FLP_5012_306_171.exe  

a746c90dae245470777071a6c41dea07


KeyBase AgentTesla Gen1 AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Check JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Phishing Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Malicious Traffic Check memory WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check OskiStealer Stealer Windows Browser Email ComputerName Password 		9 2 6 11.4 M 22 r0d

7725 2021-04-29 10:29 FPI_0485010214.exe  

00bc3f04139ef508d1b9908f5664ded3


AgentTesla AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 8.8 M 33 ZeroCERT

keyword