popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10786 2021-08-02 10:00 6.exe  

598c53bfef81e489375f09792e487f1a


DarkMatter Ransomware PE File PE32 VirusTotal Malware MachineGuid Check memory unpack itself AntiVM_Disk VM Disk Size Check Ransomware ComputerName crashed 		2 8.4 47 r0d

10787 2021-08-02 10:24 content.dotm  

23a471d956410bc80dc0cabc006252f6


VBA_macro VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW Tofsee ComputerName 		1 2 2 4.4 35 ZeroCERT

10788 2021-08-02 10:26 1.dll  

1ea7d46d94299fa8bad4043c13100df0


PWS Loki[b] Loki[m] Kpot stealer Malicious Library PE File DLL PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee 		2 2 2.0 46 ZeroCERT

10789 2021-08-02 17:49 SYNAPSE X.exe  

8bad491fd5bd7142871b1815c24305bc


Generic Malware Themida Packer Anti_VM Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware Cryptographic key crashed 		10.8 45 guest

10790 2021-08-02 17:54 XCT.exe  

fb8944b1bba155b25253fb21a246b735


Generic Malware Malicious Packer UPX DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 13.6 36 ZeroCERT

10791 2021-08-02 17:54 fontWinRuntimecrtNetrefruntime...  

2ee557a2195e41069889ecbc983a87b1


RAT Generic Malware Malicious Packer UPX DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS Processor Check .NET VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows ComputerName DNS Cryptographic key crashed 		4 5 3 3 10.8 M 50 ZeroCERT

10792 2021-08-02 17:56 .smss.exe  

f5463dbb6131a4c2643af3700f14095b


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS crashed 		2 2.8 20 ZeroCERT

10793 2021-08-02 17:57 .svchost.exe  

9318cd06a9a0b788dc043a63c97d4fce


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself DNS 		1 2.0 M 11 ZeroCERT

10794 2021-08-02 17:59 vbc.exe  

ae8b4b2b933da9181e0291f12d917dbf


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		8.6 M ZeroCERT

10795 2021-08-02 17:59 .audiodg.exe  

b8b8f8d19a603555ddd886a77c751211


PWS Loki[b] Loki[m] .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 6 1 14.0 M 20 ZeroCERT

10796 2021-08-02 18:00 allparts.exe  

4c10c29f43c09ee1abacf83fa03bbbc7


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		9.6 M 18 ZeroCERT

10797 2021-08-02 18:03 ADV.exe  

325fb848ba8b93295817fff534bd1a75


Generic Malware Malicious Packer UPX SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS DDNS Software crashed keylogger 		2 4 3 13.4 M 28 ZeroCERT

10798 2021-08-03 07:38 d.doc  

ffc171671b298066a3640509219d9038


RTF File doc FormBook Malware download Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		3 5 7 3.2 ZeroCERT

10799 2021-08-03 07:48 downloaddocument.do  

4667f2ac85f21d40d87302b19415acef


Emotet Gen1 Malicious Packer UPX Malicious Library AntiDebug AntiVM PE File OS Processor Check DLL PE32 Dridex TrickBot VirusTotal Malware Report PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Kovter ComputerName DNS crashed 		16 13 4 11.2 4 ZeroCERT

10800 2021-08-03 07:55 win.exe  

d77ca8ffc57b9dd974928a09fe6722b0


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		2 4 2 8.4 14 ZeroCERT

keyword