popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10696 2021-07-30 10:55 .svchost.exe  

1f563d126e328d5f75a96738a3bfdedd


Generic Malware Malicious Packer UPX PE32 PE File VirusTotal Malware RWX flags setting unpack itself 		1.6 M 25 ZeroCERT

10697 2021-07-30 10:56 @worker2005.exe  

bed15058430acaf20567fba8f287dd4c


PWS .NET framework RAT Generic Malware UPX PE32 OS Processor Check .NET EXE PE File Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		2 3 2 6.8 M 48 ZeroCERT

10698 2021-07-30 10:59 gjfkd.exe  

0c81dd2088368b16444a770d8e76ecf8


NPKI Generic Malware Malicious Packer UPX Malicious Library PE64 PE File VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 2 1 4.8 M 41 ZeroCERT

10699 2021-07-30 11:01 askinstall40.exe  

ef07bdb06bb72802df7cc3e7ebb13014


Gen2 Trojan_PWS_Stealer NPKI Emotet RAT Credential User Data Generic Malware Malicious Packer UPX Malicious Library SQLite Cookie Admin Tool (Sysinternals etc ...) Anti_VM Antivirus ASPack PE32 OS Processor Check PE File ELF PNG Format PE64 DLL MSOffic Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName Remote Code Execution crashed 		4 8 1 3 11.2 M 42 ZeroCERT

10700 2021-07-30 11:03 GOP.dotm  

fb729836049f0bb0c5afffc34ada717a


VBA_macro Antivirus Malware download Malware Malicious Traffic unpack itself Windows DNS 		1 6 5.4 M ZeroCERT

10701 2021-07-30 11:05 askinstall53.exe  

ffdc29b48cf5cd228193a668583fe8b3


Gen2 Trojan_PWS_Stealer NPKI Emotet RAT Credential User Data Generic Malware Malicious Packer UPX Malicious Library SQLite Cookie Admin Tool (Sysinternals etc ...) Anti_VM Antivirus ASPack PE32 OS Processor Check PE File ELF PNG Format PE64 DLL MSOffic Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName Remote Code Execution crashed 		4 8 1 3 11.2 M 53 ZeroCERT

10702 2021-07-30 11:06 vbc.exe  

c85ee9fe0a4d346432307651cb4357a1


PE32 PE File VirusTotal Malware Check memory RWX flags setting unpack itself 		2.2 M 21 ZeroCERT

10703 2021-07-30 11:06 WUpdate.exe  

22e4972a8a73e90a38f379ff527759dc


Generic Malware PowerShell MZ UPX Malicious Library Escalate priviledges KeyLogger Code injection HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE64 OS Processor Check PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities Disables Windows Security AppData folder sandbox evasion WriteConsoleW Windows Remote Code Execution crashed 		8.6 M 30 ZeroCERT

10704 2021-07-30 11:07 vbc.exe  

aa86ca00a2b4f285e61136d91e838fcc


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		10.4 M 26 ZeroCERT

10705 2021-07-30 11:08 vbc.exe  

af4ec0bc13149037006f88effdbd7643


UPX Malicious Library PE32 OS Processor Check PE File VirusTotal Malware PDB unpack itself Windows crashed 		3.0 M 50 ZeroCERT

10706 2021-07-30 11:10 PROT00LS.exe  

b55fcd2c05c42a62f04f967cb25130fc


Generic Malware PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.4 M 38 ZeroCERT

10707 2021-07-30 11:11 vbc.exe  

90091c8c9c69b12fe47cee45e5090bf9


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE32 .NET EXE PE File VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 12.8 M 24 ZeroCERT

10708 2021-07-30 11:12 .smss.exe  

0392453270a71b5a7a29b8c8d415978f


Loki PWS Loki[b] Loki[m] .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE32 .NET EXE PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 3 5 1 14.8 M 41 ZeroCERT

10709 2021-07-30 11:14 chim.exe  

b71262d7af92b5dcff86aa485d58c1cb


Generic Malware Malicious Library PE64 PE File VirusTotal Malware unpack itself 		2.6 M 29 ZeroCERT

10710 2021-07-30 11:15 askinstall52.exe  

2bedc5cb582ef4a9f879790910ebc5a0


Gen2 Trojan_PWS_Stealer NPKI BitCoin Credential User Data Generic Malware Malicious Packer UPX Malicious Library SQLite Cookie Anti_VM DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenS Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution crashed 		4 8 1 3 11.4 M 43 ZeroCERT

keyword