popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8266 2021-05-23 17:40 ALL.txt  

a140c5bb18fc4adb4a2f5d2a907de048


Antivirus VirusTotal Malware unpack itself WriteConsoleW Windows DNS Cryptographic key 		1.8 1 ZeroCERT

8267 2021-05-24 09:17 ehn410274214523502210vlbxohwp4  

bc5d3090b4ec7ece19ce132d14c0e111


VBA_macro MSOffice File VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		8 14 3 4.4 M 41 ZeroCERT

8268 2021-05-24 09:18 wnspxzq@_27899.exe  

9d24f3afa9e996bb1d87fbf12263c53f


Emotet PE File PE32 PNG Format VirusTotal Malware buffers extracted ICMP traffic unpack itself sandbox evasion Browser Remote Code Execution 		5 4 5.8 M 31 ZeroCERT

8269 2021-05-24 09:22 222333.exe  

d213c25eb7528fbc07f48fb9c151f0ed


PE File PE32 VirusTotal Malware Check memory Creates executable files RWX flags setting AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		2 6.0 M 52 ZeroCERT

8270 2021-05-24 11:38 222333.exe  

d213c25eb7528fbc07f48fb9c151f0ed


Generic Malware PE File PE32 VirusTotal Malware Check memory Creates executable files RWX flags setting AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		2 6.0 M 52 r0d

8271 2021-05-24 15:03 f3kmkuwbdpgytdc5.exe  

ae4a8c201b070ee94488bb8862ed4ec5


Generic Malware .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 M 36 r0d

8272 2021-05-24 15:12 f3kmkuwbdpgytdc5.exe  

ae4a8c201b070ee94488bb8862ed4ec5


njRAT Generic Malware .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 M 36 r0d

8273 2021-05-24 15:14 I-Record.exe  

6f80701718727602e7196b1bba7fac1b


njRAT .NET EXE PE File PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 M 52 r0d

8274 2021-05-24 15:28 PicturesLab.exe  

02398f9746a8cdebb2bc1cb9ccb40e70


njRAT .NET EXE PE File PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 M 53 r0d

8275 2021-05-24 17:28 run.exe  

63a11a44eeb7ee8c76f834d4435f4af3


GhostCringe GhostRAT PE File PE32 OS Processor Check Malware download VirusTotal Open Directory Malware GhostRAT AutoRuns Check memory Checks debugger Creates executable files RWX flags setting unpack itself Detects VMWare AntiVM_Disk sandbox evasion VMware VM Disk Size Check Windows Exploit Browser RAT Backdoor Trojan DNS crashed 		2 1 9 1 9.0 M 48 guest

8276 2021-05-24 18:10 LluwMXf8ngOwqea.exe  

3517aa20f6e5641cd95afb5d9173e696


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 22 ZeroCERT

8277 2021-05-24 18:11 bin.exe  

dbb0d24252b09d49478c336e5d0ec994


PWS .NET framework Malicious Packer AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		16 19 2 7.6 ZeroCERT

8278 2021-05-24 18:13 aYnQ4B6WoQm6DuG.exe  

20afb202b5cfbb60dc7ff5f2509c3991


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 21 ZeroCERT

8279 2021-05-24 18:14 bin---09.exe  

c2db9ae19f2ed393fb6ae0703dc30b2c


PWS .NET framework Malicious Packer AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		17 18 1 9.4 30 ZeroCERT

8280 2021-05-24 18:15 YpB5uPa1YKwLPKt.exe  

5c8003788c729d9c9d6f91c62aef10f4


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		2.2 23 ZeroCERT

keyword