popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9376 2021-06-25 10:31 infinia.client.exe  

498cb503233c8b3fc43788d659f50b8d


AsyncRAT backdoor PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 2 5.0 34 ZeroCERT

9377 2021-06-25 10:32 Apollo.exe  

b7ab9be4936d5128e13a976d4b629dd8


Emotet Gen1 Generic Malware PE File PE32 PE64 DLL OS Processor Check VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check DNS 		1 4.0 29 ZeroCERT

9378 2021-06-25 10:40 betonsuccess.exe  

3a8fb7a4ead36662756579b11cff690c


Process Kill CryptGenKey FindFirstVolume PE File OS Processor Check Device_File_Check PE32 VirusTotal Malware Checks debugger unpack itself suspicious TLD Tofsee DNS 		80 30 1 3.6 25 ZeroCERT

9379 2021-06-25 10:40 1.exe  

e35580f66f15f6f80105521180caaec0


AsyncRAT backdoor BitCoin Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 11.8 44 ZeroCERT

9380 2021-06-25 10:40 1604.exe  

439e49a4df2f4bcc359283d02f612e98


AsyncRAT backdoor PWS .NET framework Generic Malware Malicious Library PE File .NET EXE OS Processor Check PE32 Check memory Checks debugger unpack itself DNS 		1.4 ZeroCERT

9381 2021-06-25 10:45 visoft.exe  

7d6641e15ab1437b03d2238f3f41bf4f


PWS Loki[b] Loki[m] AgentTesla .NET framework Gen1 browser info stealer Generic Malware ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Vidar Arkei VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee ArkeiStealer Stealer Windows Browser Email ComputerName DNS Software Password 		9 3 5 1 17.6 M 21 ZeroCERT

9382 2021-06-25 10:48 j79.exe  

6b8f35c0e97b6387f6de945afdb59a42


Code injection AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns MachineGuid Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder Windows DNS 		2 12.2 48 ZeroCERT

9383 2021-06-25 10:48 for.exe  

26ec22872e63ca904f54feefb25f5c9c


AsyncRAT backdoor BitCoin Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Cryptographic key Software crashed 		2 4 2 1 11.4 M 39 ZeroCERT

9384 2021-06-25 10:49 error.exe  

7ac414d89337c8e0534e832a56ef6e4d


AsyncRAT backdoor Generic Malware PE File .NET EXE PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 2 3 1 3.6 M 23 ZeroCERT

9385 2021-06-25 10:52 Suasive.exe  

43dd23c802f0b3765ac64c155ff9b528


Generic Malware Malicious Packer PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows Remote Code Execution DNS crashed 		4.2 46 ZeroCERT

9386 2021-06-25 10:54 fcrtrtosk.exe  

5a4161dea2860628bfb4498095861d2a


PE File PE32 DLL VirusTotal Malware MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder sandbox evasion ComputerName DNS 		2 2 6.0 45 ZeroCERT

9387 2021-06-25 10:56 9.83B.exe  

358b9c802b3f1774ba1c55ef94faa427


PE File PE32 VirusTotal Malware unpack itself DNS crashed 		3.4 24 ZeroCERT

9388 2021-06-25 11:36 pcad164.exe  

438e38292895c8ea8dc60ccae621dec2


Emotet Antivirus AntiDebug AntiVM PE64 OS Processor Check PE File PE32 DLL VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Disables Windows Security Checks Bios Detects VirtualBox Detects VMWare suspicious process sandbox evasion WriteConsoleW VMware anti-virtualization IP Check human activity check Windows Browser ComputerName Remote Code Execution DNS DDNS crashed 		1 3 3 20.8 46 ZeroCERT

9389 2021-06-25 11:37 April_2016_IMG128315 jpeg.jpeg...  

5647f5ae95b3fe769f47c214d85989ac


KeyLogger ScreenShot AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns Code Injection buffers extracted WMI unpack itself anti-virtualization Windows ComputerName 		8.2 63 ZeroCERT

9390 2021-06-25 11:38 JV8256491470.js  

fba84df6b9bf9bd8f09b9fe20714b379

Malware download VirusTotal Malware VBScript wscript.exe payload download Creates executable files DNS Dropper 		1 3 3 10.0 40 ZeroCERT

keyword