popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9121 2021-06-23 09:21 vbc.exe  

501b60e1f6bc866c767e57456884dc09


AgentTesla AsyncRAT backdoor browser info stealer Generic Malware Google Chrome User Data Admin Tool (Sysinternals etc ...) Malicious Library Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE Fi VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS keylogger 		2 1 12.2 30 ZeroCERT

9122 2021-06-23 09:23 new%20one.exe  

1cced9999ff0a6e2c7e02fd76298a42b


Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 15.4 47 ZeroCERT

9123 2021-06-23 09:25 kzlsh1rsoz84.jpg.ps1  

24d47b0f765c2d68a125b8321039a9e3


Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW DNS 		1.8 2 ZeroCERT

9124 2021-06-23 09:28 vbc.exe  

fa0d69a3ff0a272e9e16c1fcac400a6a


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		1 2 1 9.0 24 ZeroCERT

9125 2021-06-23 09:30 f.wbk  

f3f36f774b41a24a168a80e70415f66d


RTF File doc AntiDebug AntiVM FormBook Malware download VirusTotal Malware MachineGuid Malicious Traffic Checks debugger exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 3 7 4.8 29 ZeroCERT

9126 2021-06-23 09:30 vbc-04.exe  

0e77117506e45cb650b1363ba40c1e55


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		10 14 4 8 8.6 M 23 ZeroCERT

9127 2021-06-23 16:34 vbc.exe  

7847f6a1330398c7ca2252a78b6eac35


Loki PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		2 2 9 1 8.4 22 ZeroCERT

9128 2021-06-23 16:34 audio.exe  

b6ab9db1c2c1e606268a6f613cfcdf3d


AsyncRAT backdoor PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware WriteConsoleW IP Check ComputerName DNS DDNS 		1 4 2 3.4 52 ZeroCERT

9129 2021-06-24 07:22 ...............dot  

d553bd422c8d3621e21049ccc2ebe680


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 2 7 5.0 32 ZeroCERT

9130 2021-06-24 07:39 1.doc  

7e6957c41128e2ef269aa08a1d7ede24


VBA_macro DNS 		1.4 ZeroCERT

9131 2021-06-24 08:54 مدمج الفصل الأول+الثاني+ الثال...  

11fdd27279a2a41a93b3ef63dd1ff548


Anti_VM PE File PE32 PE64 Browser Info Stealer Emotet VirusTotal Malware Buffer PE AutoRuns MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself sandbox evasion installed browsers check Windows Exploit Browser ComputerName Remote Code Execution DNS crashed 		13.0 59 ZeroCERT

9132 2021-06-24 09:03 RK12_EC_0.1.8.exe  

bdaf8a45432e2fc3a8acf75588f2723e


PE File OS Processor Check PE32 PE64 DLL VirusTotal Malware PDB Check memory Checks debugger WMI Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Creates autorun.inf Windows ComputerName Remote Code Execution DNS crashed 		8.0 13 ZeroCERT

9133 2021-06-24 09:05 p6.exe  

d743980983fcf12b1427f5ea550094da


Malicious Library DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check Windows DNS 		1 7.2 27 ZeroCERT

9134 2021-06-24 09:06 hussanx.exe  

aa2bd93add61460d059367e41d89195c


PE File PE32 Check memory RWX flags setting unpack itself anti-virtualization 		1.6 ZeroCERT

9135 2021-06-24 09:06 5bff9e596f542e5fe90ad8847f5bd5...  

2d58dc67350666f9c2ccf6ecb273afcb


PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		3.2 29 ZeroCERT

keyword