popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9706 2021-07-06 10:40 ocsp_comodoca_com  

4842e206e4cfff2954901467ad54169e


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself Browser Email 		3.0 Kim.GS

9707 2021-07-06 15:13 G1638.exe  

04b9f5df2e34ac08f7226100dfc87497


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.4 39 Kim.GS

9708 2021-07-06 15:26 MsMpEng.exe  

8cc83221870dd07144e63df594c391d9


Antivirus PE File PE32 PDB 		0.2 r0d

9709 2021-07-06 15:28 mpsvc.dll  

a47cf00aedf769d60d58bfe00c0b5421


PE File DLL OS Processor Check PE32 		0.4 51 r0d

9710 2021-07-06 15:30 MsMpEng.exe  

8cc83221870dd07144e63df594c391d9


BitCoin Antivirus Code injection IRC persistence DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Http API Internet API Steal credential ScreenShot Downloader P2P AntiDebug AntiVM PE File PE32 PDB unpack itself Windows utilities malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW Firewall state off VM Disk Size Check Ransomware Windows Tor ComputerName DNS crashed 		11.0 guest

9711 2021-07-06 15:48 mod.jpg  

bf32d6d01a0dd6802045e154b481175e

VirusTotal Malware 		1.0 M 30 ZeroCERT

9712 2021-07-06 15:53 CHLbrowser.exe  

5574293bc53a6d755fb587f4df812d99


RAT BitCoin Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Cryptographic key crashed 		2 4 2 11.8 M 36 ZeroCERT

9713 2021-07-06 15:58 OLKbrowser.exe  

424ce6df3e42cc5ff59d6e13baa138e9


RAT BitCoin Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 MSOffice File Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted RWX flags setting unpack itself Windows utilities Collect installed applications Check virtual network interfaces IP Check installed browsers check Tofsee Windows Browser ComputerName Cryptographic key crashed 		5 12 2 12.2 M 41 ZeroCERT

9714 2021-07-06 15:58 father.jpg  

a06f97d208b2dce7f5373538d840fe4f


OS Processor Check VirusTotal Malware 		0.8 28 ZeroCERT

9715 2021-07-06 16:51 G1638.exe  

04b9f5df2e34ac08f7226100dfc87497


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		8.0 39 r0d

9716 2021-07-06 16:54 recipt.exe  

6c50a6be6da2f2cd9d5b47ec5d69bcc5


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 Check memory Checks debugger unpack itself 		1.2 r0d

9717 2021-07-06 17:59 sample20210706-01.xlsm  

40253c4885c52237755e64dc8ca6e423


VBA_macro VirusTotal Malware unpack itself DNS 		2.2 9 ZeroCERT

9718 2021-07-06 18:01 60e40fb428612.dll  

c6bfea479b46b9eb7a69667e0165179f


Generic Malware PE File DLL OS Processor Check PE32 VirusTotal Malware PDB unpack itself Tofsee ComputerName crashed 		10 14 1 2.2 7 ZeroCERT

9719 2021-07-07 07:36 klinch.exe  

9a2e1bb9ad6f1ccfeaa4c2c55637ae3b


Emotet UPX PE File PE32 VirusTotal Malware Malicious Traffic DNS 		1 1 3.0 30 ZeroCERT

9720 2021-07-07 07:45 azz.exe  

00001effb01cec7a867b5ccae0325fe1


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 17 ZeroCERT

keyword