popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8896 2021-06-15 10:22 Reynard_Hydra_pg.exe  

c4d8200a28032eea56da319a55cb468e


AsyncRAT backdoor PWS .NET framework PE File .NET EXE OS Processor Check PE32 VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check ComputerName DNS DDNS 		2 4 4 5.4 42 ZeroCERT

8897 2021-06-15 10:23 MT103-150621-PDF.scr  

755f6460de480381eb4e94768fe27c92


PE File PE32 DLL VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder DNS crashed 		4.0 13 ZeroCERT

8898 2021-06-15 10:30 okcf.exe  

c8217715ef55fe5f5643a6cc6c7b797e


AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS crashed 		1 2 1 10.6 17 ZeroCERT

8899 2021-06-15 10:32 BrowzarBrowser_J1.exe  

e6e9e6a1d44c96471c367efff38a01d8


AsyncRAT backdoor PWS .NET framework BitCoin ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE PNG Format VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself AntiVM_Disk VM Disk Size Check Interception Windows Cryptographic key crashed 		18 8 9.4 52 ZeroCERT

8900 2021-06-15 10:32 w.doc  

97fc7db71d3392dd83582308478e740f


RTF File doc Malware download Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 2 6 3.2 M ZeroCERT

8901 2021-06-15 10:32 RFL_022_610_377.exe  

571db81b25298d3b3bfb6d19ce03f71f


SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 9.8 16 ZeroCERT

8902 2021-06-15 10:35 pc_uuppdate.exe  

bf7b01b358903416117bc4de8e0861b2


AsyncRAT backdoor AntiDebug AntiVM PE File .NET EXE PE32 Malware download AsyncRAT Dridex NetWireRC TrickBot VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Kovter DNS 		1 2 8.2 M 24 ZeroCERT

8903 2021-06-15 10:37 bin-p.exe  

df75f88b30020d1128ec273659993534


AsyncRAT backdoor PWS .NET framework Admin Tool (Sysinternals Devolutions inc) Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.6 M 28 ZeroCERT

8904 2021-06-15 10:39 bin.exe  

285cc0e41ca87f5eb2a6d08680a0f94b


Admin Tool (Sysinternals Devolutions inc) Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.6 M 28 ZeroCERT

8905 2021-06-15 10:45 scbybttprepush528.exe  

5f32ab11399c7596889739620f178464


Gen2 Gen1 Emotet Anti_VM PE File OS Processor Check PE32 DLL PNG Format GIF Format MSOffice File JPEG Format PE64 VirusTotal Malware PDB suspicious privilege MachineGuid Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself AppData folder AntiVM_Disk China anti-virtualization VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Windows Browser ComputerName Remote Code Execution DNS 		56 17 4 11.2 M 19 ZeroCERT

8906 2021-06-15 10:51 Document 1659904.xls  

c03577c814275b568037f2eb9e0fc1e3


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		10 20 2 3.8 26 ZeroCERT

8907 2021-06-15 10:51 Document 53142810.xls  

76d9ad731b3417ce329035c3497d19eb


VBA_macro Generic Malware MSOffice File VirusTotal Malware unpack itself Tofsee Windows crashed 		1 2 1 5.8 23 ZeroCERT

8908 2021-06-15 10:55 UltraMediaBurner.exe  

d6a73306c5bdcc557880a455bfb1a4be


AsyncRAT backdoor PWS .NET framework njRAT PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		3.0 37 ZeroCERT

8909 2021-06-15 10:56 IDownload.exe  

4a6b686ed3f18f9aecf846d08a6aa948


AsyncRAT backdoor PWS .NET framework njRAT PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.4 35 ZeroCERT

8910 2021-06-15 10:58 img_23_61_78_802.exe  

d45879197ce5a42e7c810bca5e020af5


PWS Loki[b] Loki[m] DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 5 1 8.8 M 33 ZeroCERT

keyword