popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9526 2021-07-01 06:57 vbc.exe  

41f28ba9d94721b4397b1d4a170123a4


Lokibot PWS Loki[b] Loki[m] RAT .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library DNS Socket AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		2 2 7 1 13.0 ZeroCERT

9527 2021-07-01 08:08 105.dll  

fcc006d52996cd0eb65b33914045ef17


DLL PE32 PE File VirusTotal Malware Checks debugger unpack itself DNS 		1.8 1 ZeroCERT

9528 2021-07-01 08:08 ojhvxcgdfsd.exe  

995bf66e1305d116167f598cffb872a9


PWS .NET framework Generic Malware Malicious Packer .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.0 M 24 ZeroCERT

9529 2021-07-01 08:10 un.exe  

f72c2ec4d30ac2255660c50ad4f3cb5f


OS Processor Check PE32 PE File VirusTotal Malware DNS 		2.2 M 52 ZeroCERT

9530 2021-07-01 08:10 un.exe  

f72c2ec4d30ac2255660c50ad4f3cb5f


OS Processor Check PE32 PE File VirusTotal Malware 		1.6 M 52 ZeroCERT

9531 2021-07-01 08:13 catx.exe  

5398c6db0ce70c200ecad76511baccf1


Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library DNS AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 1 14.8 14 ZeroCERT

9532 2021-07-01 08:15 ujunkwerex.exe  

6fc65c14ff61433c356bfda77e0c6e41


RAT Generic Malware UPX Antivirus DNS AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW human activity check Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 3 3 2 15.0 M 19 ZeroCERT

9533 2021-07-01 08:15 tele.exe  

d9a00e83e1274fafbb08ffac114e7b10


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 12.0 M 40 ZeroCERT

9534 2021-07-01 08:17 vbc.exe  

b8b983659cce2f715b3a81d650c80df7


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 MSOffice File PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.6 M 26 ZeroCERT

9535 2021-07-01 08:18 CE_Agent_Funding_Advice_pdf.js  

dadca572b4e524d5f03a2a4f9b25a050

WMI ComputerName DNS DDNS 		2 1 3.6 ZeroCERT

9536 2021-07-01 08:20 som.exe  

296f369decd12d95360b63edc2353eca


RAT Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		11.4 M 20 ZeroCERT

9537 2021-07-01 08:25 vbc.exe  

8f0c1dbed9264aecc9a8ef0efd0ea494


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Tofsee Windows DNS Cryptographic key 		21 17 5 2 9.2 23 ZeroCERT

9538 2021-07-01 08:32 idu567.tmp  

18c3793f2df5ae48b55a9a1825b1c1fb


Generic Malware DLL PE32 PE File VirusTotal Malware PDB Check memory unpack itself ComputerName DNS 		1 2.2 12 ZeroCERT

9539 2021-07-01 08:35 SignerLib.exe  

796b3e4674b68b33c906ce32c3275d83


Generic Malware OS Processor Check PE32 PE File VirusTotal Malware 		1.2 M 41 ZeroCERT

9540 2021-07-01 08:40 iduD8A5.tmp  

fcc006d52996cd0eb65b33914045ef17


DLL PE32 PE File VirusTotal Malware Checks debugger unpack itself 		1.2 M 4 ZeroCERT

keyword