popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10486 2021-07-25 11:13 osxcjhgfd.exe  

36d1e716d8da89c2f49be65feaeadca5


PWS .NET framework Gen1 Generic Malware Malicious Packer UPX Malicious Library AntiDebug AntiVM PE32 .NET EXE PE File OS Processor Check DLL VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows 		8 2 2 9.0 M 42 ZeroCERT

10487 2021-07-25 11:14 file4.exe  

f3cf8f5fb6694a2facf07326cc1df2ce


UPX Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 M 30 ZeroCERT

10488 2021-07-25 11:16 vbc.exe  

3c6ca48961f11343d68ad63242af5eaa


PWS .NET framework RAT Generic Malware UPX Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.6 M 17 ZeroCERT

10489 2021-07-25 11:19 NetFramework.exe  

18851ac1b5161ebdb1b2cf9a9e69ffaa


PWS .NET framework RAT Generic Malware UPX PE32 OS Processor Check .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Cryptographic key Software crashed 		2 4 2 7.0 M 38 ZeroCERT

10490 2021-07-25 11:21 ac.exe  

877446a3230a1bdc809f50ad1477c3fd


PWS .NET framework Generic Malware Malicious Packer AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		3 12.6 M 42 ZeroCERT

10491 2021-07-25 12:07 .csrss.exe  

63fda29f4ba3e51aecc86992494144d2


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		6.2 M 44 ZeroCERT

10492 2021-07-25 12:08 toolspab1.exe  

66599922c76c5fba265f7a0a9d544dff


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		2.8 26 ZeroCERT

10493 2021-07-25 12:10 pdf.exe  

06daa4f472383226392964c70e34c376


Antivirus KeyLogger ScreenShot AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName Cryptographic key 		2 8 2 1 14.6 M 11 ZeroCERT

10494 2021-07-25 12:10 toolspab2.exe  

71b85af14fc8e5832d492a4c265916cb


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		2.8 28 ZeroCERT

10495 2021-07-25 12:12 asxcjhgfd.exe  

377170928109b8cf902b223b247cab87


PWS Loki[b] Loki[m] .NET framework Generic Malware Malicious Packer UPX DNS Socket KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE32 .NET EXE PE File OS Processor Check DLL VirusTotal Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Check virtual network interfaces AppData folder malicious URLs Windows ComputerName 		4 3 5 12.2 M 27 ZeroCERT

10496 2021-07-25 12:13 vbc.exe  

3a23d766503a54317f86c1a175aa4b28


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		10 10 1 9.2 M 44 ZeroCERT

10497 2021-07-25 12:14 vodafone  

43245acd2bfc4fb651961933a72da0ad


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware Code Injection Check memory Checks debugger unpack itself Browser Email 		4.0 M 30 ZeroCERT

10498 2021-07-25 12:14 nzezx.exe  

49903bdde201f45c4879d5b446d0510a


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		1 1 10.0 M 42 ZeroCERT

10499 2021-07-25 12:16 r.txt  

cfada30d54f8a6ebedf7b7edd3c57b4f


Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder WriteConsoleW shadowcopy delete Tofsee Windows ComputerName crashed 		2 1 6.0 M 61 ZeroCERT

10500 2021-07-25 12:19 toolspab3.exe  

e1efc9ffe52d619e45016f1b81a3415a


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		2.8 M 20 ZeroCERT

keyword