popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10711 2021-07-30 11:15 faktura-77_2021-3.pdf.exe  

f7ba0f7a61b8b51a5e1823d5fd274d12


PWS .NET framework Gen1 Gen2 Generic Malware UPX Malicious Library Malicious Packer ScreenShot Http API Steal credential AntiDebug AntiVM PE32 OS Processor Check .NET EXE PE File DLL VirusTotal Email Client Info Stealer Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder installed browsers check Tofsee Ransomware Windows Browser Email ComputerName DNS Cryptographic key 		4 3 4 13.4 15 ZeroCERT

10712 2021-07-30 11:45 economic relations.doc  

9b1ca0408e33c43970b87c4c380b134f


VBA_macro Generic Malware Antivirus MSOffice File PE32 DLL .NET DLL PE File VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		2 4 1 11.0 6 ZeroCERT

10713 2021-07-30 11:48 documentation_67198.vbs  

30634e6b16ac0cce95c017ce9dc6e9a0

 ZeroCERT

10714 2021-07-30 11:49 JPM_Payment_Remittance_505693....  

b2633a1d702957694bb470b202ba032c


VBA_macro Antivirus UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE32 PE File Emotet VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 7 5 18.8 M 23 ZeroCERT

10715 2021-07-30 11:51 credit.exe  

821e75318f291ec08bafe26ceb1eeeff


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE32 PE File Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		3 4 1 9.4 M 20 ZeroCERT

10716 2021-07-30 15:06 vbc.exe  

c85ee9fe0a4d346432307651cb4357a1


CryptBot PE32 PE File VirusTotal Malware Check memory RWX flags setting unpack itself 		2.2 M 21 r0d

10717 2021-07-30 15:55 lv.exe  

e606e3bbeb846d4ef17eca787b09c728


Emotet Gen1 NPKI Gen2 Malicious Library UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiD VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows crashed 		1 6.6 M 20 ZeroCERT

10718 2021-07-30 20:49 29.exe  

ab99e71c87f024b99c10c02f88b3e40b


Gen2 UPX Malicious Library PE32 PE File OS Processor Check DLL VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion IP Check Tofsee ComputerName 		5 10 2 3 8.4 M 43 ZeroCERT

10719 2021-07-30 20:49 2201.exe  

52303e3dc2b3b9ad36ba6169418c5bd2


Gen2 UPX Malicious Library PE32 PE File OS Processor Check DLL VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself AppData folder sandbox evasion IP Check Tofsee ComputerName 		5 10 2 3 7.6 M 47 ZeroCERT

10720 2021-07-30 20:50 .audiodg.exe  

d8e32ab45623cf6631abc3a271d4e183


PWS .NET framework RAT Generic Malware UPX Admin Tool (Sysinternals etc ...) .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 25 ZeroCERT

10721 2021-07-30 20:51 lv.exe  

075ba8e35c73b895b107baad6b85bb82


NPKI Emotet Gen1 Gen2 Malicious Library UPX Malicious Packer PE32 PE File DLL OS Processor Check VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 5.4 M 26 ZeroCERT

10722 2021-07-30 20:53 vbc.exe  

4a1051bd16e2fd2e017ba346059572a0


PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic ICMP traffic unpack itself DNS 		3 7 3 4.4 M 20 ZeroCERT

10723 2021-07-30 20:55 .csrss.exe  

b4e65ed28277c81bc487a30b282b88a1


PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS 		2 2.6 M 25 ZeroCERT

10724 2021-07-31 09:50 vbc.exe  

4a1051bd16e2fd2e017ba346059572a0


Formbook PE32 PE File VirusTotal Malware suspicious privilege unpack itself 		2.8 M 20 r0d

10725 2021-07-31 13:26 huh.exe  

932cb9ca236e1e8c6740d9db01410778


PWS .NET framework njRAT backdoor RAT Generic Malware Malicious Packer UPX OS Processor Check .NET EXE OS Name Check PE32 PE File VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself AppData folder anti-virtualization Windows ComputerName Cryptographic key crashed keylogger 		9.8 49 ZeroCERT

keyword