popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8641 2021-06-08 10:03 nanno1.exe  

d44345634f9dbc3d9cda94370dc66203


DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself human activity check Windows ComputerName DNS 		2 7.2 M 33 ZeroCERT

8642 2021-06-08 10:04 ewa.exe  

e177b9ddfcae8d13fe94d04395ea920e


PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Malicious Library SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.2 M 21 ZeroCERT

8643 2021-06-08 10:05 9011.exe  

ed4a90d8b23e1ca80bb595a9d9630be8


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 4 10.2 M 30 ZeroCERT

8644 2021-06-08 10:06 IMG_52_67_21_33.exe  

becc9c4709bbee070275cd42acfc02c9


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 9.4 M 23 ZeroCERT

8645 2021-06-08 10:07 BLI_0610_36_31.exe  

a8ad861ef6877f243bdfbb00ddf2f37b


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.4 M 40 ZeroCERT

8646 2021-06-08 10:10 RFL_0731_60_127.exe  

52757942734a95026f4499e2747f8007


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 23 ZeroCERT

8647 2021-06-08 10:12 IMG_0001_205_60_37.exe  

c222dad25c8ba8ab2af48692ad261bcf


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 27 ZeroCERT

8648 2021-06-08 10:12 11222.exe  

cf7421633145edb90fbcac702fb4603a


AgentTesla browser info stealer Google Chrome User Data Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself suspicious process Windows DNS 		1 7.4 M 42 ZeroCERT

8649 2021-06-08 10:14 RFL_0570103064.exe  

ea5b036e25672815c17e85213586f118


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 22 ZeroCERT

8650 2021-06-08 10:17 Dota 2 Offline Launcher + Emu ...  

7e69d9b8cf9b27f9b918736123267086


PE File PE32 VirusTotal Malware PDB Check memory RWX flags setting unpack itself DNS 		3.2 38 ZeroCERT

8651 2021-06-08 10:19 excel  

4024e3a79b01981ce7e8c42c8c815d30


PE File OS Processor Check PE32 VirusTotal Malware DNS 		1 2.0 31 ZeroCERT

8652 2021-06-08 10:22 BLI_057702308.exe  

6f86775cd014c339e3c8b25563fd51d9


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 10.0 M 26 ZeroCERT

8653 2021-06-08 10:24 Dota 2 Offline Launcher + Emu ...  

7e69d9b8cf9b27f9b918736123267086


PE File PE32 VirusTotal Malware PDB Check memory RWX flags setting unpack itself DNS 		3.2 38 ZeroCERT

8654 2021-06-08 10:44 BTQbrowser.exe  

b12fbbf68290508b870ea4f9d38a25b4


AsyncRAT backdoor PWS .NET framework BitCoin AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious TLD Tofsee Windows DNS Cryptographic key 		1 4 1 10.6 28 ZeroCERT

8655 2021-06-08 10:49 JNB.exe  

5f4b0a0fc9e6d760a09f5b87826e6212


Generic Malware PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself ComputerName DNS 		1 2.4 14 ZeroCERT

keyword