popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10216 2021-07-20 08:05 quote.exe  

65cb21f74729427dcb7ddb1bb8cb762f


Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed 		8 13 1 8.4 M 26 ZeroCERT

10217 2021-07-20 08:06 apines.exe  

1db818edcd076f1410f95e7ca3242354


UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 M 28 ZeroCERT

10218 2021-07-20 08:07 lv.exe  

68886f96b3223730b1e228f42aecc5cf


Gen1 Gen2 UPX Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence AntiDebug AntiVM VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 7.2 M 41 ZeroCERT

10219 2021-07-20 08:09 jjroblox.exe  

2308cedb77f66e4a821d57e8ee1e08a5


Gen2 njRAT backdoor Generic Malware UPX Malicious Packer PE File OS Processor Check PE32 .NET EXE DarkComet AutoRuns suspicious privilege Code Injection Check memory Creates executable files unpack itself Windows utilities Disables Windows Security suspicious process AppData folder WriteConsoleW human activity check Windows Remote Code Execution DNS DDNS keylogger 		2 1 13.4 M ZeroCERT

10220 2021-07-20 08:09 F-Launcher.exe  

6c592736cf6ae24c1d7e5d051234fdbd


njRAT backdoor Gen2 Generic Malware Malicious Packer UPX PE File PE32 .NET EXE OS Processor Check DarkComet VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Check virtual network interfaces suspicious process AppData folder WriteConsoleW human activity check Windows Java DNS DDNS crashed keylogger 		2 1 17.4 M 64 ZeroCERT

10221 2021-07-20 08:10 801.exe  

bc5d860da754c16a5e214a03b96d970b


UPX AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware Buffer PE PDB Code Injection buffers extracted unpack itself 		7.6 M 47 ZeroCERT

10222 2021-07-20 08:11 vbc.exe  

8cf5cb10708d0fea42106a1d31ba4248


UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 50 ZeroCERT

10223 2021-07-20 08:12 .csrss.exe  

8f35517bd68bbe4d0d2362445172763a


UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 46 ZeroCERT

10224 2021-07-20 08:14 quotation.exe  

688a5cdda1ae1e75e3e84facfecf3fb4


Generic Malware Anti_VM UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed 		10 11 1 8.8 M 23 ZeroCERT

10225 2021-07-20 08:15 update.exe  

44b42e92ffe33907c539d1135bb05239


PE File PE32 Emotet VirusTotal Malware AutoRuns suspicious privilege Code Injection buffers extracted RWX flags setting unpack itself Disables Windows Security sandbox evasion Windows ComputerName crashed 		8.6 M 57 ZeroCERT

10226 2021-07-20 08:15 ups.js  

66cf8adae71b2d556f58371d937ba4b3

VirusTotal Malware VBScript wscript.exe payload download DNS Dropper 		1 10.0 17 ZeroCERT

10227 2021-07-20 08:15 file.exe  

3577889cdae96c45ac86d0fabe6723b0


UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.4 M 30 ZeroCERT

10228 2021-07-20 08:17 weads.exe  

c826a43b3cdb08fc06ddfa2e223a5710


UPX Malicious Library PE File PE32 VirusTotal Malware RWX flags setting unpack itself ComputerName DNS 		2 1 3.8 M 58 ZeroCERT

10229 2021-07-20 08:17 cvhost.exe  

c65eb22434cbf550e158d45cf9a64470


UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 M 25 ZeroCERT

10230 2021-07-20 08:19 ugopoundx.exe  

0c89a6ac4ceb310ad34dcf92ec3a77bb


PWS Loki[b] Loki[m] .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 6 1 14.0 M 21 ZeroCERT

keyword