popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10666 2021-07-29 12:29 avatar_fjub.png  

07c0e9bc0a6e4336ed6ca2aeed444063


Generic Malware Malicious Library PE32 DLL PE File VirusTotal Malware 		1.2 M 26 ZeroCERT

10667 2021-07-29 12:30 button_nved5.png  

d85acbbe7007a1fd45395f41ea1e8d17


Generic Malware Malicious Library PE32 DLL PE File 		0.4 M ZeroCERT

10668 2021-07-29 12:30 filler_lfsbou.png  

a6a50cc203d6ca41ecce2afd17ba0b28


Generic Malware Malicious Library PE32 DLL PE File 		0.4 M ZeroCERT

10669 2021-07-29 12:32 vbc.exe  

6bfe2fb7f8d57f8ed975854b2d95c6bd


PWS Loki[b] Loki[m] .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 7 13.0 24 ZeroCERT

10670 2021-07-30 10:25 .audiodg.exe  

fc030e6077d1a645b2bb1e0d77cc778d


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.0 37 ZeroCERT

10671 2021-07-30 10:27 vbc.exe  

9d92fb1d9dc509364b324872a133a5ac


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows DNS Cryptographic key crashed 		7 13 3 1 9.2 M 26 ZeroCERT

10672 2021-07-30 10:28 ksvchost.exe  

0f9f7906389dee17c4606dd2cad2d214


Generic Malware UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself 		2.2 25 ZeroCERT

10673 2021-07-30 10:28 vbc.exe  

90d7398bd4bb66384b309201ce5f20f0


PWS Loki[b] Loki[m] Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 13.6 25 ZeroCERT

10674 2021-07-30 10:30 DhcpcommonFontsession.exe  

999142f2751bd4d2d1da9a2d558029d3


RAT Generic Malware Malicious Packer UPX PE32 OS Processor Check .NET EXE PE File VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces AntiVM_Disk suspicious TLD VM Disk Size Check Windows ComputerName crashed 		2 2 6.8 45 ZeroCERT

10675 2021-07-30 10:32 brokerhostperffontSavesdhcp.ex...  

840eb0664fe0d3fa68c8f16e0b1d970e


RAT Generic Malware Malicious Packer UPX PE32 OS Processor Check .NET EXE PE File VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS crashed keylogger 		2 1 8.8 M 49 ZeroCERT

10676 2021-07-30 10:33 vbc.exe  

844aa82d8a7faac7c53778f82eebe8c1


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE32 PE File FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		21 24 2 11.4 32 ZeroCERT

10677 2021-07-30 10:33 Desktop.exe  

f31199c1fccb1fe693824f89573e4194


Themida Packer Anti_VM DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VMWare Check virtual network interfaces suspicious process WriteConsoleW VMware anti-virtualization IP Check Tofsee Windows ComputerName Firmware DNS crashed 		5 3 3 13.2 M 52 ZeroCERT

10678 2021-07-30 10:34 bvack.exe  

59fb7442592a9c032fbabad5a797fbde


PWS .NET framework RAT Generic Malware UPX PE32 OS Processor Check .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 4.6 M 34 ZeroCERT

10679 2021-07-30 10:35 reviewwinfontrefperf.exe  

cc982bb10719da0325bdd790df6b3a03


RAT Generic Malware Malicious Packer UPX PE32 OS Processor Check .NET EXE PE File Browser Info Stealer VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces AntiVM_Disk IP Check VM Disk Size Check Tofsee Windows Browser ComputerName DNS Cryptographic key 		2 4 3 8.6 M 46 ZeroCERT

10680 2021-07-30 10:37 file.exe  

042edfa930d712dd70b6adee1218d3d9


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself 		2.2 M 27 ZeroCERT

keyword