popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9181 2021-06-24 13:52 vbc.exe  

de41a01457573e366909c2ddb491d1f3


Generic Malware Malicious Packer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		3.6 44 r0d

9182 2021-06-24 18:52 AutoUpdate.exe  

e1d039fffde52305c0b315b3bd34beec


AsyncRAT backdoor PWS .NET framework Generic Malware Antivirus PE File .NET EXE PE32 GIF Format VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName DNS Cryptographic key 		1 1 6.4 29 ZeroCERT

9183 2021-06-24 18:54 1912911284.exe  

452be1334a422f61c6cf1e5faffe9aac


AsyncRAT backdoor BitCoin Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 9.0 46 ZeroCERT

9184 2021-06-24 18:56 download.php  

e26b7bc94aac86c0faef0ed54aaa4461


PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS 		3.2 15 ZeroCERT

9185 2021-06-24 18:56 xxxx1_2021-06-22_10-59.exe  

75fc5d6c951b284bc1c6b309c7c5fd9e


PE File OS Processor Check PE32 VirusTotal Malware unpack itself 		2.2 43 ZeroCERT

9186 2021-06-24 18:57 4p-desktop.exe  

2020ddf1aac56d939f7ee5af52903258


PE File PE32 JPEG Format PNG Format GIF Format VirusTotal Malware Buffer PE MachineGuid Check memory buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee ComputerName DNS 		22 6 2 7.2 32 ZeroCERT

9187 2021-06-24 18:58 3ebce3a4.png  

d0fc39d941e2d32edc687c3f6275afd8


MSOffice File VirusTotal Malware DNS 		1.6 33 ZeroCERT

9188 2021-06-24 19:01 downfile.asp  

95c9114f4850e45b212d0e053103961e


PE File PE32 JPEG Format PNG Format VirusTotal Malware Check memory buffers extracted Creates executable files RWX flags setting unpack itself Interception DNS crashed 		92 4 5.0 33 ZeroCERT

9189 2021-06-24 19:02 defi.exe  

ee17b850393e1f3cf0704a408378d874


NPKI Raccoon Stealer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows crashed 		3.4 53 ZeroCERT

9190 2021-06-24 19:03 dll.rar  

0ae26770b96b47165c58ed621143d439


Anti_VM PE File DLL PE32 VirusTotal Malware Checks debugger unpack itself DNS crashed 		1 3.2 54 ZeroCERT

9191 2021-06-24 19:03 ProstoLauncher.exe  

7410df6db7dd9dfc0c4103efa8d13fc9


Gen2 NPKI Generic Malware PE File .NET EXE PE32 PE64 DLL OS Processor Check GIF Format VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AntiVM_Disk suspicious TLD VM Disk Size Check Tofsee ComputerName DNS 		9 2 1 6.0 35 ZeroCERT

9192 2021-06-24 19:04 Console.exe  

61fca35c673bcac5409c0b738e6c8b34


Generic Malware DGA DNS SMTP Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Internet API ScreenShot Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows crashed keylogger 		2 12.0 37 ZeroCERT

9193 2021-06-24 19:05 xxxx1_2021-06-22_10-59.exe  

75fc5d6c951b284bc1c6b309c7c5fd9e


PE File OS Processor Check PE32 VirusTotal Malware unpack itself 		2.2 43 ZeroCERT

9194 2021-06-24 19:07 BaiHai3306.exe  

70f73040b04bd10072e2e325efcc8ff3


Gh0st RAT Malicious Packer PE File PE32 Malware download VirusTotal Malware GhostRAT AutoRuns sandbox evasion Windows Backdoor DNS 		1 2 4.2 62 ZeroCERT

9195 2021-06-24 19:08 0007.exe  

ed139ac790df240e64d862a344f02f83


Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		11.4 44 ZeroCERT

keyword