popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9601 2023-10-13 01:05 Password_dll.txt  

21567881b3d5d574a5ef76c7bda521dc


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 guest

9602 2023-10-13 01:05 LBB_PS1_pass.ps1  

f9407d83dea3626282b5fbbb9127c7dc


Generic Malware task schedule Downloader Antivirus Socket DGA Http API ScreenShot Escalate priviledges PWS SMTP DNS KeyLogger Create Service Steal credential Sniff Audio HTTP Code injection Internet API persistence FTP P2P AntiDebug AntiVM Check memory unpack itself malicious URLs WriteConsoleW Windows Cryptographic key crashed 		2.6 guest

9603 2023-10-13 01:04 Password_exe.txt  

0bfc8082533654edacb07337a575b119


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

9604 2023-10-13 01:04 LBB_Rundll32.dll  

cf9b606e14c2a720052da5d84e22bd9b


BlackMatter Ransomware PE File DLL PE32 		0.6 guest

9605 2023-10-13 01:03 LBB_PS1_obfuscated.ps1  

e3c6fb29f3bea55756031a6571215cb9


Generic Malware Antivirus Check memory unpack itself Windows Cryptographic key 		0.8 guest

9606 2023-10-13 01:03 LBB_PS1.ps1  

9e1efd43fcb4cde660f44c7dde33c673


Generic Malware Antivirus Check memory unpack itself Windows Cryptographic key 		0.8 guest

9607 2023-10-13 01:02 LBB_PS1_pass.ps1  

f9407d83dea3626282b5fbbb9127c7dc


Generic Malware Downloader task schedule Antivirus Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P SMTP AntiDebug AntiVM Check memory unpack itself malicious URLs WriteConsoleW Windows Cryptographic key crashed 		3.2 guest

9608 2023-10-13 01:02 LBB.exe  

58ea73145bc83846a9beccfb54ef3b02


BlackMatter Ransomware PE File PE32 unpack itself 		1.0 guest

9609 2023-10-13 01:02 LBB_Rundll32_pass.dll  

7a19d7814274b8d46f79369bdbf21626


PE File DLL PE32 		0.6 guest

9610 2023-10-13 01:02 Password_ps1.txt  

975d7d238a824cf37893450cc62d2b9f


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 guest

9611 2023-10-13 01:02 Password_dll.txt  

21567881b3d5d574a5ef76c7bda521dc


Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

9612 2023-10-13 01:01 LBB_ReflectiveDll_DllMain.dll  

8e4835042e8de50cddd5a48491340c19


BlackMatter Ransomware PE File DLL PE32 		0.4 guest

9613 2023-10-13 01:01 LBB_Rundll32.dll  

cf9b606e14c2a720052da5d84e22bd9b


BlackMatter Ransomware PE File DLL PE32 		0.6 guest

9614 2023-10-13 01:01 LBB_pass.exe  

a7edf0c15f22c442ab77d767eb98f112


PE File PE32 		0.6 guest

9615 2023-10-13 01:00 LBB_PS1_obfuscated.ps1  

e3c6fb29f3bea55756031a6571215cb9


Generic Malware Antivirus Check memory unpack itself Windows Cryptographic key 		0.8 guest

keyword