popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8971 2021-06-17 13:37 xtMLjbxLmstVb.exe  

1af4b28e44d75b4fe50ae509798a626c


AsyncRAT backdoor PE File .NET EXE PE32 Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces DNS crashed 		2 2 3 3.0 M ZeroCERT

8972 2021-06-17 13:38 lv.exe  

4ae50cbb1eb34f2ab6880f25519504a4


NPKI Gen1 Gen2 Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence AntiDebug AntiVM VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS crashed 		2 9.2 M 43 ZeroCERT

8973 2021-06-17 13:38 http://srand04rf.ru/f7juhkryu4...  

270c3859591599642bd15167765246e3


AgentTesla Ficker Stealer browser info stealer Google Chrome User Data DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persist Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Check memory buffers extracted Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Collect installed applications AppData folder malicious URLs suspicious TLD sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Stealer Windows Exploit Browser Tor ComputerName DNS Software crashed 		2 7 5 16.0 M 55 Kim.GS

8974 2021-06-17 13:39 ctrlxPWVtmxJrb.exe  

66f348f54eb3cf9d2fc3a91058bf3bb8


PE File PE32 VirusTotal Malware RWX flags setting unpack itself DNS 		3.0 M 58 ZeroCERT

8975 2021-06-17 13:42 Document%20185781.xls  

aae5b4c8eb3968b6bf06074865070a4e


VBA_macro MSOffice File VirusTotal Malware Check memory unpack itself Tofsee DNS crashed 		10 20 4 5.8 M 18 ZeroCERT

8976 2021-06-17 13:44 Document%202519711.xls  

c64202fc6e89fc1c49cde536894ed99d


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		10 18 4 5.6 M 21 ZeroCERT

8977 2021-06-17 13:45 gfers.exe  

dbf34c56d244279f0e989540fbd6cda2


Raccoon Stealer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows crashed 		2.8 M 30 ZeroCERT

8978 2021-06-17 13:47 infostati.exe  

00ca5d98e8244569f3e07def869fb291


Raccoon Stealer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows DNS crashed 		1 4 3.6 M 24 ZeroCERT

8979 2021-06-17 13:47 log.exe  

f72277eebaf6b7e2891b7ba24188ebda


AsyncRAT backdoor PE File .NET EXE PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces DNS crashed 		2 2 3 3.8 M 21 ZeroCERT

8980 2021-06-17 13:48 PubSafe.rar  

2e7e9709f9538f01e3761efba44c7c1e


Escalate priviledges KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself DNS 		3.0 M 23 ZeroCERT

8981 2021-06-17 13:50 PC.txt  

5688c69c4379841eee42dcaec2dbf55a


AsyncRAT backdoor DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW human activity check Tofsee Windows ComputerName DNS DDNS crashed 		1 5 2 16.2 M 34 ZeroCERT

8982 2021-06-17 13:51 regasm.exe  

a56883a8c35dcf0ba1ab8263afa220e4


PWS Loki[b] Loki[m] .NET framework Admin Tool (Sysinternals etc ...) Malicious Library DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 4 6 1 14.2 M 24 ZeroCERT

8983 2021-06-17 14:30 ctrlxPWVtmxJrb.exe  

66f348f54eb3cf9d2fc3a91058bf3bb8


Generic Malware Malicious Packer PE File PE32 VirusTotal Malware RWX flags setting unpack itself AntiVM_Disk VM Disk Size Check 		2.8 M 58 r0d

8984 2021-06-17 15:26 http://2.indexsinas.me:811/ser...  

e8fb243e4a198c6d940b9f829ef0b79a


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		4 2 5.6 56 Kim.GS

8985 2021-06-17 15:32 f7juhkryu4.exe  

270c3859591599642bd15167765246e3


Ficker Stealer PE File PE32 VirusTotal Malware ICMP traffic IP Check DNS 		1 4 1 4.8 M 55 ZeroCERT

keyword