popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7831 2023-10-11 10:58 REQUEST FOR OFFER.exe  

40a0594721777a253cd4481267194ff9


Malicious Library UPX PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed 		2.8 7 ZeroCERT

7832 2023-10-11 08:07 updat1.exe  

571ea8843de2bd01744f6caba0e202ea


Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware unpack itself crashed 		2.0 M 29 guest

7833 2023-10-11 08:03 sihost.exe  

7ee626b72a7112befb6febbb8f635ede


LokiBot Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		13.0 M 38 ZeroCERT

7834 2023-10-11 08:01 marcolite2.1.exe  

71ea87bcc822a68c4ef492ecbdba37f6


NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		1 5 1 4.4 M 34 ZeroCERT

7835 2023-10-11 07:59 fbinzx.exe  

00b27694025e82652c1976c6745a2de1


Formbook PWS AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 5 1 1 8.4 M 39 ZeroCERT

7836 2023-10-11 07:57 sihost.exe  

1d2e25e64e7c402540fa6ce6871257f4


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		3 4 15.0 M 41 ZeroCERT

7837 2023-10-11 07:57 sihost.exe  

8d91ce7f3a66bcfda11e488cc34c698f


Formbook UPX .NET framework(MSIL) ScreenShot PWS AntiDebug AntiVM PE File PE32 .NET EXE OS Processor C FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		20 24 11 18 11.4 M 40 ZeroCERT

7838 2023-10-11 07:56 updat1.exe  

571ea8843de2bd01744f6caba0e202ea


Malicious Library UPX PE File PE64 OS Processor Check VirusTotal Malware unpack itself crashed 		2.0 M 29 ZeroCERT

7839 2023-10-11 07:55 ishost.exe  

e8ba8c2f63e7d3e3cbf0dd2a426e4eb5


Generic Malware .NET framework(MSIL) Antivirus PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		12.0 M 32 ZeroCERT

7840 2023-10-11 07:52 ishost.exe  

f83a1ebac520b7deea9613aa2a7765c4


LokiBot .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.4 M 48 ZeroCERT

7841 2023-10-11 07:52 googluk.exe  

07b8df6ee60cd20723ba20794e15d438


LokiBot .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.4 M 49 ZeroCERT

7842 2023-10-11 07:51 romankon2.1.exe  

f66044875f6dff90814d4b09be15bde7


NSIS Malicious Library UPX PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		4 9 1 4.0 M 31 ZeroCERT

7843 2023-10-11 07:50 strim2.exe  

f43edef896d4995aa3c4b488bbc3dab2


UPX PE File PE64 OS Processor Check VirusTotal Malware Buffer PE MachineGuid Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3.4 M 23 ZeroCERT

7844 2023-10-11 06:49 build.exe  

06aff89f42cf65991c1bbc67515786d1


Generic Malware Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check VirusTotal Malware crashed 		1.4 53 guest

7845 2023-10-11 01:52 deliver.exe  

6d62f962f2d3fbb718452f1ee915d4d7


Generic Malware Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check VirusTotal Malware PDB crashed 		1.4 24 guest

keyword