popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10066 2021-07-15 10:28 va.exe  

4fce8340b8819f756b9e3afedf5917fd


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 4 8.8 21 ZeroCERT

10067 2021-07-15 10:29 Invoice%2050261765%20from%20Qu...  

f92a895f8781cd98115c3cb123301e1c


VBA_macro MSOffice File PE32 PE File VirusTotal Malware Check memory buffers extracted Creates executable files unpack itself suspicious process Windows crashed 		1 2 4.0 21 ZeroCERT

10068 2021-07-15 10:30 kn.exe  

bf27c89acbd897d3a37e415cf7b69ee2


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		2 4 9.0 22 ZeroCERT

10069 2021-07-15 10:31 Receipt-427172.xls  

cf1af8277a86596fc04df4adbddb0702


VBA_macro MSOffice File PE32 PE File VirusTotal Malware Check memory buffers extracted Creates executable files unpack itself suspicious process Windows crashed 		1 2 3.8 18 ZeroCERT

10070 2021-07-15 10:32 driver-installer.exe  

9a122ed5dd32c372318c47d47f9e605b


RAT Generic Malware UPX KeyLogger Http API Steal credential ScreenShot AntiDebug AntiVM PE64 PE File VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 8.0 39 ZeroCERT

10071 2021-07-15 10:33 Trinn.exe  

1130aadc21e61f9fc3ea418177382a2a


RAT BitCoin Generic Malware AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Windows Browser ComputerName Cryptographic key crashed 		2 4 12.0 44 ZeroCERT

10072 2021-07-15 10:35 lv.exe  

5cbbdb7bab881f319d1f54c8c76cb4ae


Gen1 Gen2 Malicious Library UPX DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence AntiDebug AntiVM PE32 PE File DLL VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 7.4 35 ZeroCERT

10073 2021-07-15 10:36 Invoice%20720710%20from%20Quic...  

40425d09e54ff26289dd074649f0cad9


VBA_macro MSOffice File PE32 PE File VirusTotal Malware Check memory buffers extracted Creates executable files unpack itself suspicious process Windows crashed 		1 2 3.8 17 ZeroCERT

10074 2021-07-15 10:36 nn.exe  

36dae96c9425608f4d2441ab5c38130f


PWS Loki[b] Loki[m] Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 1 13.4 M 22 ZeroCERT

10075 2021-07-15 10:39 file.exe  

58fa567894c7dc28d2b7f0d7f3886512


RedLine Stealer UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself 		2.4 31 ZeroCERT

10076 2021-07-15 10:41 5.exe  

0140b4f87910ef13e348b28a67aac23a


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE32 PE File .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.4 34 ZeroCERT

10077 2021-07-15 10:44 sam.exe  

54da6f0e11090728404d0f9807ef3674


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		10 12 2 9.4 M 22 ZeroCERT

10078 2021-07-15 10:46 ee.exe  

7fa7ddc6957d2b24810e70ea30f7ca12


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		3 7 8.8 26 ZeroCERT

10079 2021-07-15 11:30 vbc.exe  

41496ecf0772fb06472b37b7be9a7ec9


RedLine Stealer UPX PE32 PE File OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.8 51 ZeroCERT

10080 2021-07-15 11:31 cmd.exe  

2fd35a47c26de70495d7abd6e8704e1d


RAT Generic Malware UPX AntiDebug AntiVM PE32 PE File OS Processor Check .NET EXE VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Remote Code Execution DNS 		1 1 11.2 57 ZeroCERT

keyword