popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8596 2021-06-06 09:51 obi-098.exe  

f3d39cc860c4c5c0e4ea170f8ea1d82a


Admin Tool (Sysinternals Devolutions inc) Anti_VM Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself ComputerName DNS 		8.0 M 35 ZeroCERT

8597 2021-06-06 09:51 obi.exe  

ab47e401497210ab9ef4cd4f5edd711c


PWS .NET framework Anti_VM Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE OS Processor Check PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.4 M 25 ZeroCERT

8598 2021-06-06 09:53 loud-0098.exe  

bf93de4660852c5c49dfba5cb0b87fd1


AsyncRAT backdoor PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Anti_VM Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName DNS Cryptographic key crashed 		2.6 11 ZeroCERT

8599 2021-06-06 09:54 loud.exe  

c26467017961d695ccd9666d160e1209


AsyncRAT backdoor PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Anti_VM Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.2 14 ZeroCERT

8600 2021-06-06 09:56 loud-098.exe  

5f8f8e08669e510154136dce28f0630b


PWS .NET framework Anti_VM Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.6 M 17 ZeroCERT

8601 2021-06-06 09:58 loud-07.exe  

48ae7e551369b4589d012ee8a92f70ed


AsyncRAT backdoor PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Anti_VM Malicious Library PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.6 M 37 ZeroCERT

8602 2021-06-06 11:36 tMo.txt.html  

345571ee62c1c613049e0e0d0a3ce5d5


VBScript PowerShell Obfuscated File VirusTotal Malware DNS crashed 		1.4 M 15 ZeroCERT

8603 2021-06-06 13:59 tMo.txt.html  

345571ee62c1c613049e0e0d0a3ce5d5


VBScript PowerShell Obfuscated File Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key 		1 1 6.8 M 15 ZeroCERT

8604 2021-06-06 21:47 update.exe  

a3b54783fd619282ff712dc6e3c6b197


DNS Socket Create Service Escalate priviledges KeyLogger Code injection ScreenShot BitCoin AntiDebug AntiVM PE File PE64 VirusTotal Cryptocurrency Miner Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName Firmware DNS CoinMiner 		2 1 14.6 44 ZeroCERT

8605 2021-06-06 21:48 f.exe  

723425455c102e80649218e45438c39c


AgentTesla email stealer browser info stealer Google Chrome User Data DNS Socket KeyLogger ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself DNS crashed 		1 10.0 35 ZeroCERT

8606 2021-06-06 21:53 afo.docx  

92bd8363f47010e0cd7cc0a4a932b732


PNG Format Vulnerability VirusTotal Malware unpack itself DNS 		3 2 1 3.6 M 25 ZeroCERT

8607 2021-06-06 21:53 lv.exe  

2bea295ed661e250862fffc04e539213


AgentTesla Gen1 Gen2 Generic Malware Malicious Packer Malicious Library DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persis VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS crashed 		2 9.2 43 ZeroCERT

8608 2021-06-06 21:54 as.exe  

2e5b7fe1474016edb2e5af6c23373e5d


AsyncRAT backdoor PWS .NET framework Anti_VM Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		9.6 48 ZeroCERT

8609 2021-06-06 21:55 uwa.docx  

3eb620f82132d7715cde30887fa24ed5


PNG Format Vulnerability VirusTotal Malware unpack itself DNS 		3 2 1 3.4 M 18 ZeroCERT

8610 2021-06-06 21:56 d.exe  

95fae5e8246bec2a2c04a331da6950b5


AntiDebug AntiVM PE File .NET EXE PE32 Malware download AsyncRAT Dridex NetWireRC TrickBot VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Kovter DNS crashed 		2 2 8.8 M 32 ZeroCERT

keyword