popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8911 2021-06-15 10:59 nnaf.exe  

f9f02646aeeaa754474089a00d07b0e5


AsyncRAT backdoor SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName crashed 		1 2 1 10.2 M 23 ZeroCERT

8912 2021-06-15 11:00 vbc.exe  

616a10fdc3307fd483916e1b578c9f9c


AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself DNS crashed 		8.8 M 42 ZeroCERT

8913 2021-06-15 11:01 IDownload.exe  

ecb919c46197e6af3661c1883035536a


AsyncRAT backdoor Gen1 PE File PE32 DLL .NET DLL GIF Format OS Processor Check .NET EXE PE64 VirusTotal Malware MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser ComputerName 		6.0 M 3 ZeroCERT

8914 2021-06-15 11:03 I-Record.exe  

628507826e1b4f53cccc7d795a83a6e8


AsyncRAT backdoor PWS .NET framework njRAT PE File .NET EXE PE32 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 24 ZeroCERT

8915 2021-06-15 11:03 W10.exe  

9925c832892716a17f2d2cfe504d6014


AsyncRAT backdoor AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		6 8 1 9.8 M 39 ZeroCERT

8916 2021-06-15 11:05 ultramediaburner.exe  

6103ca066cd5345ec41feaf1a0fdadaf


AsyncRAT backdoor Gen1 PE File PE32 .NET EXE OS Processor Check GIF Format DLL PE64 VirusTotal Malware MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser ComputerName 		4.6 M 5 ZeroCERT

8917 2021-06-15 11:07 VOKLIGHTD.exe  

2b766f06adf2c73fb6da681572d72a6f


UltraVNC PE File OS Processor Check PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		2.8 M 13 ZeroCERT

8918 2021-06-15 11:09 VOKLIGHT.exe  

9a86329fb7bd48fc778676e664d3d0be


NPKI UltraVNC PE File OS Processor Check PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		2.8 M 13 ZeroCERT

8919 2021-06-15 13:08 loader1.exe  

ca473ade92ba6526bf258bfeffc7248e


PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder sandbox evasion 		28 28 2 8 5.2 M 35 guest

8920 2021-06-15 21:23 document-37-1849.xls  

c41a21a821bcdea1d3ab26ebef055eed


MSOffice File VirusTotal Malware Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows 		1 2 6.6 7 ZeroCERT

8921 2021-06-15 21:28 imagen01.jpg  

793707365df26450bc8642f518a540f0


PE File PE32 PE64 VirusTotal Malware Malicious Traffic buffers extracted Creates shortcut unpack itself Windows utilities suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Windows Tor DNS keylogger 		1 3 4 7.4 M 43 ZeroCERT

8922 2021-06-15 21:29 dra.exe  

45efa9779ec5f51bbc501dbb6bbbba3e


PE File PE32 DLL FormBook Malware download Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion 		22 24 2 5.0 ZeroCERT

8923 2021-06-15 21:29 Document 81161221.xls  

d65c8d73d13ed5d4f2973631101c4b34


VBA_macro Generic Malware MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		10 18 4 4.0 30 ZeroCERT

8924 2021-06-15 22:10 ReferenciaCorreios798.msi  

8a2af0e991663612e3569de186ec4ee7


Gen2 Antivirus OS Processor Check MSOffice File suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		1.8 ZeroCERT

8925 2021-06-15 22:11 covid.exe  

74084608256e6e4c3434d17217d0993a


Generic Malware Malicious Packer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows Remote Code Execution DNS crashed 		3.8 M 51 ZeroCERT

keyword