popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7846 2021-05-04 11:13 700223.exe  

0f1616761218cc9712dcd268f4bb2d3f


AsyncRAT backdoor PWS .NET framework AgentTesla AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer VirusTotal Malware malicious URLs Browser ComputerName crashed 		1 2.8 M 44 ZeroCERT

7847 2021-05-04 11:15 p.exe  

ee0a1ec859b753abc30847157d81f37c


PE File PE32 VirusTotal Malware AutoRuns PDB Disables Windows Security Firewall state off Windows Tor DNS crashed 		1 3 2 6.8 M 45 ZeroCERT

7848 2021-05-04 11:15 rtd0t1.exe  

080f3430fa1c166d755ade6b9f21f08f


PWS Loki AsyncRAT backdoor .NET framework AgentTesla DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 2 7 1 8.4 M 39 ZeroCERT

7849 2021-05-04 11:18 LFI_874_103_116.exe  

090148a4d527120eaaa7d5d2f0aa5bf1


AsyncRAT backdoor PWS .NET framework AgentTesla Gen1 AntiDebug AntiVM .NET EXE PE File PE32 DLL OS Processor Check JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Malicious Traffic Check memory WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check OskiStealer Stealer Windows Browser Email ComputerName DNS Password 		9 1 6 2 12.6 M 44 ZeroCERT

7850 2021-05-04 11:21 46.exe  

0a6569e45a3a38f7168f4c4aa0594627


tor PE File PE32 Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Buffer PE AutoRuns PDB Malicious Traffic buffers extracted Creates executable files Disables Windows Security Check virtual network interfaces AppData folder Firewall state off Kovter Windows Tor DNS Cryptographic key 		5 11 19 2 12.6 M 38 ZeroCERT

7851 2021-05-04 11:22 Ihxpuxr.exe  

015f45de6bf81ded8c921435c471d087


AsyncRAT backdoor AgentTesla Gen1 AntiDebug AntiVM .NET EXE PE File PE32 JPEG Format DLL OS Processor Check Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Malicious Traffic Check memory WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check OskiStealer Stealer Windows Browser Tor Email ComputerName DNS Password 		10 4 7 2 11.8 M 14 ZeroCERT

7852 2021-05-04 11:24 Upafbvbme.exe  

386e843ddabe44f203acc35788b5c749


AsyncRAT backdoor PWS .NET framework AgentTesla SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Tor Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 5 9.0 M 38 ZeroCERT

7853 2021-05-04 13:50 46.exe  

0a6569e45a3a38f7168f4c4aa0594627


tor Worm Phorpiex PE File PE32 Dridex TrickBot ENERGETIC BEAR VirusTotal Malware AutoRuns PDB Malicious Traffic Creates executable files ICMP traffic Disables Windows Security Check virtual network interfaces AppData folder Firewall state off Kovter Windows Tor DNS 		5 12 18 4 12.4 M 38 r0d

7854 2021-05-04 14:13 p.exe  

ee0a1ec859b753abc30847157d81f37c


Worm Phorpiex PE File PE32 Dridex TrickBot ENERGETIC BEAR VirusTotal Malware AutoRuns PDB Malicious Traffic ICMP traffic Disables Windows Security Check virtual network interfaces Firewall state off Kovter Windows Tor DNS Cryptographic key 		4 11 11 1 10.8 M 45 r0d

7855 2021-05-04 18:20 ss.vbs  

98f69749329ccb2ee8d69288e04f2332


Antivirus powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		6.0 ZeroCERT

7856 2021-05-04 18:20 all.bat  

d4c2856e8c22e984a62bcc8b3fcdc505


AgentTesla Antivirus DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Code injection Http API Internet API Steal credential ScreenShot Downloader P2P AntiDebug AntiVM powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 3 6.6 ZeroCERT

7857 2021-05-04 18:22 arinzex.exe  

b61fa321f22d56553ab37916d973cf4e


Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		13.4 M 18 ZeroCERT

7858 2021-05-04 18:23 win32.exe  

62c0acfc18a80a6132a3e8d8baacc90a


PE File PE32 DLL OS Processor Check Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 9 9.2 16 ZeroCERT

7859 2021-05-04 18:24 scr.dll  

31980c9b17f61c5f808cb882e41083af


DLL PE File PE32 JPEG Format ENERGETIC BEAR VirusTotal Malware Malicious Traffic Checks debugger buffers extracted unpack itself DNS 		1 1 1 4.0 M 39 ZeroCERT

7860 2021-05-04 18:27 Sample.exe  

ee7c05c530262450d2c5ace98ebbf8bc


PWS .NET framework .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		8.0 M 22 ZeroCERT

keyword