Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8281 2021-05-24 18:15 vbc.exe  

c43ff70c1a60486bda3a8f005e5bf26f


PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed
10.2 40 ZeroCERT

8282 2021-05-24 18:17 rYMtUTp556Z02qL.exe  

76c61f35c06b4d510bc59d3f8aa42fea


AsyncRAT backdoor PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key
2.0 8 ZeroCERT

8283 2021-05-24 18:17 brazzz.exe  

011ef8c61ebdce09c170eff3311c4a0a


Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key
3.0 36 ZeroCERT

8284 2021-05-24 18:19 banh.exe  

8dc45cee87ca5370db8341c7755c8b9e


PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed
9.4 20 ZeroCERT

8285 2021-05-24 18:20 sIIpO8jjC02iQCT.exe  

3d9a120a83e330ab0f26454a46b9e1e7


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key
2.8 24 ZeroCERT

8286 2021-05-24 18:22 c0r0n4x.spc  

4ad6111429ca4e0546a847815659843c


AntiDebug AntiVM ELF VirusTotal Malware Check memory Checks debugger unpack itself DNS
2.6 29 ZeroCERT

8287 2021-05-24 18:23 bin---0.exe  

9191f2c11d448ac2baa34768d210f3a7


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself
20 24 1 3.6 44 ZeroCERT

8288 2021-05-24 18:24 vbc.exe  

3b2b6ffb60a32fda17e7196a96dd7e72


AsyncRAT backdoor PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed
1 9.0 M 18 ZeroCERT

8289 2021-05-25 09:31 ACC.exe  

1b566412e52165a3ef457cc7dd0ecfba


AsyncRAT backdoor PWS .NET framework Malicious Library Escalate priviledges AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer VirusTotal Malware powershell AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW shadowcopy delete Ransomware Windows Browser ComputerName DNS Cryptographic key
1 1 19.4 M 26 ZeroCERT

8290 2021-05-25 09:33 tSuk40mH9f7Dz23.exe  

232b3e7b065156daaabbc65228e0eede


AsyncRAT backdoor PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key
2.4 21 ZeroCERT

8291 2021-05-25 09:35 app.exe  

e6f2c7e2ebd7dd935bbdce6c38e50467


Raccoon Stealer Glupteba PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows DNS crashed
3.4 26 ZeroCERT

8292 2021-05-25 09:35 nd.xlsx  

f886a27269a2648e3cb5cf4ce85d579b


MSOffice File Malware download VirusTotal Malware exploit crash unpack itself Windows Exploit DNS DDNS crashed Downloader
1 5 2 5.4 16 ZeroCERT

8293 2021-05-25 09:36 bin---old.exe  

18d071af176d03b7611afe4d60b9cac9


AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key
7.6 21 ZeroCERT

8294 2021-05-25 09:38 bin.exe  

6ab96e3529b17180141109a469eb5a43


AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key
8.2 22 ZeroCERT

8295 2021-05-25 09:38 kn.exe  

c1827d46d577d50f668c8b0b845416c3


PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder
2.6 12 ZeroCERT