popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10576 2021-07-28 09:32 klSsrzxwsbxeJQh.exe  

3be1fa609b4f6efa9d30b5c75810f863


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		7 16 1 9.0 22 ZeroCERT

10577 2021-07-28 09:34 .audiodg.exe  

66da45ed268a07990768ee03d70e4502


PWS Loki[b] Loki[m] .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 6 1 14.2 M 38 ZeroCERT

10578 2021-07-28 09:35 vbc.exe  

18e38eae3d407418b879271c9b5736bd


UPX Malicious Library PE32 PE File FormBook Emotet Malware download VirusTotal Malware Buffer PE Code Injection Malicious Traffic buffers extracted ICMP traffic RWX flags setting unpack itself Tofsee Remote Code Execution 		13 16 2 4 8.8 M 30 ZeroCERT

10579 2021-07-28 09:35 direction.png.exe  

499200f6a8e223c057c6e16701740721


UPX PE32 DLL PE File VirusTotal Malware 		1.0 M 22 guest

10580 2021-07-28 09:36 dllhost.exe  

56784137661c7e02c6c0e36b8fd217de


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.4 M 33 ZeroCERT

10581 2021-07-28 09:37 .svchost.exe  

098d627a93cd7687f54c4bd1c342e00d


Generic Malware Malicious Packer UPX PE32 PE File VirusTotal Malware RWX flags setting unpack itself 		1.6 M 21 ZeroCERT

10582 2021-07-28 09:38 .csrss.exe  

f3a4f1cc5720b34b682d65f04bd122fe


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.8 M 25 ZeroCERT

10583 2021-07-28 09:38 KLcaCYuAidZMbBJ.exe  

77e9f5464c103f8fedf6ae500d87dd32


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.4 M 31 ZeroCERT

10584 2021-07-28 09:40 EBN.exe  

4ff2f77e4d4cf8207749dd70205c6551


Generic Malware Malicious Packer SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check ComputerName DNS DDNS 		1 2 2 9.0 M 25 ZeroCERT

10585 2021-07-28 09:43 HAM.exe  

d9b7fb50628a76fe7603d82f6f0c0bd8


Generic Malware Malicious Packer DNS AntiDebug AntiVM PE32 .NET EXE PE File Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 14.0 M 25 ZeroCERT

10586 2021-07-28 09:45 porto.pdf.exe  

8dd7c961c9cdbd69e9a5d86d7809fc50


Emotet Malicious Packer UPX Malicious Library PE32 OS Processor Check DLL PE File Dridex TrickBot VirusTotal Malware Report PDB suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		4 12 5 3 8.8 M 21 guest

10587 2021-07-28 11:33 direction.png.exe  

499200f6a8e223c057c6e16701740721


Generic Malware Malicious Packer UPX Malicious Library PE32 DLL PE File VirusTotal Malware 		1.0 M 22 r0d

10588 2021-07-28 13:29 Delegation Visit.exe  

80ac2514cd9b41ea87c35610596165e4


RAT PWS .NET framework Generic Malware Anti_VM PDF PE32 .NET EXE PE File VirusTotal Malware PDB Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces suspicious process AppData folder ComputerName DNS 		2 3 7.2 48 guest

10589 2021-07-28 13:32 https://support.apple.com/kb/H...  

65dea483ccf0f75d0b58c8892163538c


DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		55 5 2 4.6 guest

10590 2021-07-28 13:33 Conf Pts.pdf _ _ _.pdf.exe  

028e4fe5858806375cef3fe66b45b5f8


NPKI RAT Generic Malware PDF PE32 .NET EXE PE File VirusTotal Malware AutoRuns PDB Check memory Checks debugger Creates executable files unpack itself AppData folder WriteConsoleW Windows 		2 3 5.6 48 guest

keyword