popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8206 2021-05-21 08:43 netwire.exe  

9d19dad3b71dfeec8276cb6e266365df


PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		7.2 ZeroCERT

8207 2021-05-21 09:57 img.dll  

d2fe28f11e61c88847055640d0d92b41


DLL PE File OS Processor Check PE32 VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself ComputerName DNS 		7 5 3.4 10 ZeroCERT

8208 2021-05-21 09:57 file.exe  

02e171ec492666d05afa7e86f10cd2a4


Glupteba PE File OS Processor Check PE32 PDB unpack itself Windows Remote Code Execution crashed 		2.2 ZeroCERT

8209 2021-05-21 09:59 mixx.exe  

53529b7a2bba1c28d654e484043206cb


Glupteba PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows Remote Code Execution DNS crashed 		3.6 22 ZeroCERT

8210 2021-05-21 10:00 vbc.exe  

6e1e56fd157c5d33cac5a84225561906


AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.4 26 ZeroCERT

8211 2021-05-21 10:01 infostati2.exe  

18b6e2c669dc078e297af35aaaa605fc


Glupteba PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows Remote Code Execution DNS crashed 		3.6 M 21 ZeroCERT

8212 2021-05-21 10:02 .................................  

478a959e356e377f88446ac0d6f09f98


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 6 5.0 M 23 ZeroCERT

8213 2021-05-21 10:09 Doc1.docm  

53e6579c2aad2ae7d6a3ce99045a114b


VBA_macro VirusTotal Malware unpack itself Tofsee DNS 		1 2 3 4.2 M 32 ZeroCERT

8214 2021-05-21 10:11 lv.exe  

9a3bb80e21a22b3f2579bc6e27dc065b


Gen1 NPKI Glupteba Gen2 Malicious Library PE File PE32 DLL OS Processor Check VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS crashed 		1 8.0 M 26 ZeroCERT

8215 2021-05-21 10:12 .................................  

7d216963eff2efe2b5aa60ffdcaa5627


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 6 5.0 M 25 ZeroCERT

8216 2021-05-21 10:14 Document%209863223.xls  

a3770e810232a6e15b4fd36a444ef8d4


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee 		2 20 2 2 3.2 M 21 ZeroCERT

8217 2021-05-21 10:14 0520_9597866810567.doc  

30e6824bbda52b477b50c80b2f96f855


VBA_macro DNS Socket ScreenShot AntiDebug AntiVM OS Processor Check MSOffice File Browser Info Stealer Malware download FTP Client Info Stealer Vulnerability VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Collect installed applications Check virtual network interfaces suspicious process suspicious TLD sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Stealer Windows Browser ComputerName DNS Software 		4 9 6 20.4 M 13 ZeroCERT

8218 2021-05-21 10:16 zapa1.exe  

ec3a138ffb5f8172efb8216b729a6813


AsyncRAT backdoor AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		1 10.6 M 24 ZeroCERT

8219 2021-05-21 10:16 0520_455268495140.doc  

c8b9b8a8fa820b1494a3ae1ad03733d9


VBA_macro OS Processor Check MSOffice File Vulnerability VirusTotal Malware Malicious Traffic Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 8.6 9 ZeroCERT

8220 2021-05-21 10:20 Sep.exe  

262936a46f6130dcd0415a530d885080


Gen1 Gen2 PE File PE32 DLL OS Processor Check Malware download VirusTotal Open Directory Malware GhostRAT AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files RWX flags setting unpack itself Detects VMWare AppData folder AntiVM_Disk sandbox evasion VMware VM Disk Size Check Windows Exploit Browser RAT Backdoor Trojan DNS crashed 		8 6 10 10.6 M 49 ZeroCERT

keyword