popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10681 2021-07-30 10:37 loader.exe  

2136731abbe410fb24240c34f1a47260


VMProtect Malicious Packer UPX Malicious Library AntiDebug AntiVM PE32 OS Processor Check PE File DLL Malware download VirusTotal Malware GhostRAT PDB Code Injection Checks debugger Creates executable files unpack itself Detects VMWare suspicious process VMware Tofsee RAT Backdoor ComputerName Trojan DNS crashed 		1 3 4 9.0 M 20 ZeroCERT

10682 2021-07-30 10:39 694271_Telegram_Buratino-T.apk  

dc030efa5973ba809bad2f544d9b18d2


Generic Malware VirusTotal Malware 		1.0 M 35 ZeroCERT

10683 2021-07-30 10:40 pmo-01.exe  

121a6914b86cfc9ca8d12864cba4da75


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows DNS Cryptographic key crashed 		8 17 2 6 9.8 M 26 ZeroCERT

10684 2021-07-30 10:41 vbc.exe  

b6e6712ed64dc7d72f13f84ef50c04ad


Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 5.8 M 25 ZeroCERT

10685 2021-07-30 10:42 0GTTI98V0N.exe  

096fc2ac3b2337b2293a9f64a8bc06c7


PWS .NET framework RAT Generic Malware UPX PE32 .NET EXE PE File JPEG Format PNG Format Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces Tofsee Browser ComputerName DNS Software crashed 		5 6 3 6.8 M 49 ZeroCERT

10686 2021-07-30 10:43 @bbakoch.exe  

109c885cfa000ea4d0c72f9e30e7191c


PWS .NET framework RAT Generic Malware UPX PE32 OS Processor Check .NET EXE PE File Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		2 3 2 6.8 M 43 ZeroCERT

10687 2021-07-30 10:44 SessionBrokerhostCrtCommonSave...  

cd0b926202baba9c26fde1d71e6b38a7


RAT Generic Malware Malicious Packer UPX DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE32 OS Processor Check .NET EXE PE VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS 		1 9.0 M 32 ZeroCERT

10688 2021-07-30 10:46 can.exe  

d7c3ab252ef50bfbce42bd5ef67a4217


PWS .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.4 M 35 ZeroCERT

10689 2021-07-30 10:46 downloaddocument.do  

8dcc2d557edcd14aa33dd738ea58f937


Emotet Gen1 Malicious Packer UPX Malicious Library PE32 OS Processor Check DLL PE File Dridex TrickBot VirusTotal Malware Report suspicious privilege MachineGuid Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName Remote Code Execution DNS crashed 		4 13 5 3 8.4 M 17 ZeroCERT

10690 2021-07-30 10:48 chrome.exe  

90eb803d0e395eab28a6dc39a7504cc4


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware Report suspicious privilege MachineGuid Code Injection Checks debugger buffers extracted exploit crash unpack itself installed browsers check Windows Exploit Browser DNS Cryptographic key crashed 		2 2 10.4 M 15 ZeroCERT

10691 2021-07-30 10:49 lv.exe  

07a8066356c148cb6de49f858865a99f


NPKI Emotet Gen1 Gen2 Malicious Library UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiD VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 6.2 M 28 ZeroCERT

10692 2021-07-30 10:50 babkadeda.exe  

536e4abcd95e47970c6dcad2a6a4dec8


PWS .NET framework RAT Generic Malware UPX PE32 OS Processor Check .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 4.8 M 49 ZeroCERT

10693 2021-07-30 10:50 .csrss.exe  

b158c924678cd5bac37bfd7bfc9d8781


Generic Malware Admin Tool (Sysinternals etc ...) PE32 .NET EXE PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.2 M 34 ZeroCERT

10694 2021-07-30 10:52 Tms5ke8HVQpO8gl.exe  

91e00dfab0a4c96a3eb89ea38eff74c4


PWS Loki[b] Loki[m] Generic Malware UPX DNS Socket KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE32 .NET EXE PE File Malware download Azorult VirusTotal Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key 		1 2 1 9.0 M 20 ZeroCERT

10695 2021-07-30 10:53 Minerrr.exe  

9f6215f166653c320ed7e749d6114cdd


RAT Generic Malware PE64 PE File VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		5.8 M 20 ZeroCERT

keyword