popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10741 2021-07-31 13:50 askinstall53.exe  

393f9bf423a7914f91acfb26710a607d


Gen2 Trojan_PWS_Stealer NPKI Emotet RAT Credential User Data Generic Malware Malicious Packer UPX Malicious Library SQLite Cookie Admin Tool (Sysinternals etc ...) Anti_VM Antivirus ASPack OS Processor Check PE32 PE File ELF PNG Format PE64 DLL MSOffice Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName Remote Code Execution crashed 		3 8 1 2 11.2 M 46 ZeroCERT

10742 2021-07-31 13:51 intonetrefruntimedhcp.exe  

529156ed28b10d5152cbbdb85db59355


RAT Generic Malware Malicious Packer UPX DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM OS Processor Check .NET EXE PE32 PE VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS crashed 		2 1 10.2 M 38 ZeroCERT

10743 2021-07-31 13:52 autodata.exe  

05d3ecbebc7492b620bdd443ddec52a1


PE32 PE File DLL VirusTotal Malware AppData folder Remote Code Execution 		1.6 M 32 ZeroCERT

10744 2021-07-31 13:53 ce866ae254de4cabd60a95abcc52c3...  

ce866ae254de4cabd60a95abcc52c315


VBA_macro Generic Malware Antivirus MSOffice File DLL .NET DLL PE32 PE File VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 2 1 11.2 19 ZeroCERT

10745 2021-07-31 13:55 svchost.exe  

7a898f78eb97b42d86893276d19f0abf


PE32 PE File DLL VirusTotal Malware AppData folder Windows Remote Code Execution 		1 2 1 2.0 M 36 ZeroCERT

10746 2021-07-31 13:58 m.wbk  

bf5e8751e3af7fe048a666903d98ae2d


RTF File doc AntiDebug AntiVM FormBook Malware download Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS crashed 		2 4 8 4.2 ZeroCERT

10747 2021-07-31 13:59 nuevo.exe  

d5c87c83b729c3047d0c9c213dfc8e64


PE32 PE File DLL AppData folder Remote Code Execution 		0.6 ZeroCERT

10748 2021-07-31 14:01 winscp.com  

f998fcd26455fb41278f8887ecb5594e


PWS Loki[b] Loki[m] Malicious Library PE32 PE File WriteConsoleW crashed 		0.4 ZeroCERT

10749 2021-07-31 14:01 @sc4lly1337.exe  

08ddca87b625734e0028a89fd4ec7247


PWS .NET framework RAT Generic Malware PSW Bot LokiBot ZeusBot UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebu Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		5 9 6 15.6 M 34 ZeroCERT

10750 2021-07-31 14:04 welldone.exe  

4ee1fe5a7eae87277c898e6c98757e18


RAT Generic Malware PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself ComputerName crashed 		2.6 45 ZeroCERT

10751 2021-07-31 14:04 clip.exe  

17b0dca4c5d5c3037c814ac1a253082b


RAT Generic Malware UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE64 PE File .NET EXE PE32 VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Cryptographic key 		2 4 12.8 M 35 ZeroCERT

10752 2021-07-31 14:07 Document%20896885.doc  

3f89ed9e9e4be551f2d13b16287248c0


VBA_macro Generic Malware Malicious Packer MSOffice File VirusTotal Malware unpack itself Tofsee 		1 20 4 1 2.8 M 24 ZeroCERT

10753 2021-07-31 14:18 clo.exe  

296968fa478ce8b4832446c33afc37a5


RAT Generic Malware AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.0 53 ZeroCERT

10754 2021-07-31 14:19 win32.exe  

da28d70a6664dada6cfd6a5fb7769f22


PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) .NET EXE PE32 PE File Check memory Checks debugger unpack itself crashed 		1.4 ZeroCERT

10755 2021-08-01 09:13 link.jpg.ps1  

9f63005e964ad4c6663d2052dee07826


Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 9.8 3 ZeroCERT

keyword