popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10831 2021-08-03 17:05 7f1f7c5c4b6b486e5ba93409440362...  

7f1f7c5c4b6b486e5ba9340944036285


VBA_macro MSOffice File VirusTotal Malware RWX flags setting unpack itself 		2.8 25 ZeroCERT

10832 2021-08-03 18:29 2670767360cnf.xlsx  

39ca085ce4df97ba36a9a61666be7b3f


Generic Malware MSOffice File Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash unpack itself Windows Exploit DNS crashed 		1 1 5 4.4 M 21 ZeroCERT

10833 2021-08-03 18:30 PO20201120 PACKING LIST & INVO...  

4a044c98d5e93a64d63e0bd2aa4f14d8


Generic Malware MSOffice File Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 6 4.0 M 23 ZeroCERT

10834 2021-08-04 09:25 mbv.exe  

c7fa8f8171852a11239f8e2c2b38815c


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware unpack itself 		1.6 22 ZeroCERT

10835 2021-08-04 09:25 Clownic1.0.exe  

711486a19e8b011528dee34a5d25776e


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself 		2.4 44 ZeroCERT

10836 2021-08-04 09:27 Autoupdate.exe  

1d46827289d9ae8b53f8f7ae54f89000


Generic Malware Antivirus UPX PE File OS Processor Check .NET EXE PE32 GIF Format VirusTotal Malware MachineGuid Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check Windows ComputerName Cryptographic key 		1 4.8 36 ZeroCERT

10837 2021-08-04 09:27 arinzex.exe  

ba17343be61c0394910b0ada481b1f86


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 12.6 M 23 ZeroCERT

10838 2021-08-04 09:29 toolspab3.exe  

c3dfcfc19b5756d18d6ac1a185b349e9


UPX Malicious Library AntiDebug AntiVM PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		7.2 22 ZeroCERT

10839 2021-08-04 09:30 vbc.exe  

811ea41e60760a97b5f28973618728fe


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName DNS 		3 5 1 9.4 27 ZeroCERT

10840 2021-08-04 09:31 toolspab2.exe  

0223d101b920891258027c3a87606982


UPX Malicious Library AntiDebug AntiVM PE File PE32 Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		6.4 ZeroCERT

10841 2021-08-04 09:32 dun.exe  

214b1ddf045e4d6fdd73a5c8788d2adc


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		8 9 1 6 9.4 M 21 ZeroCERT

10842 2021-08-04 09:33 vbc.exe  

26f17ecd8ee2fc34a1c0b3b850d9d0fc


PE File PE32 VirusTotal Malware Check memory unpack itself DNS crashed 		1 3.0 M 20 ZeroCERT

10843 2021-08-04 09:34 .----...............---....inv...  

6ffa0988ffc7d8ff440b6811065d974c


RTF File doc AntiDebug AntiVM LokiBot Malware download VirusTotal Malware c&c MachineGuid Malicious Traffic Check memory exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 2 14 1 5.4 M 33 ZeroCERT

10844 2021-08-04 09:36 New_1007572_021.exe  

41137fd61b9cc0d92225c91660a5902c


RAT Generic Malware UPX AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder crashed 		3 7 1 9.4 M 22 ZeroCERT

10845 2021-08-04 09:37 dun-1.exe  

182170393a1acd19744575f00562384f


Generic Malware UPX Malicious Library Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		8 10 1 6 9.4 M 20 ZeroCERT

keyword