popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10846 2021-08-04 09:37 vbc.exe  

ecc19a6e75196aba87b243737d5fd361


PE File PE32 VirusTotal Malware 		1.4 M 15 ZeroCERT

10847 2021-08-04 09:39 New_0027200031.exe  

8cbbf3dabe926f1dda7c89ca477206fd


PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 3 17.4 M 37 ZeroCERT

10848 2021-08-04 09:42 Excel_71_804_23122.exe  

9c7ea0cadbcba4d2d9777731339fab43


PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 6 3 17.4 M 23 ZeroCERT

10849 2021-08-04 09:42 ConsoleApp14.exe  

fb5b5b8edf450c3cb9c5c88547874048


PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 7 3 18.8 M 42 ZeroCERT

10850 2021-08-04 09:43 templezx.exe  

3753bd42962d4b5c2324993e91a58415


Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 3 12.6 M 20 ZeroCERT

10851 2021-08-04 09:43 896c8decb45706dd597b53329732c3...  

bbd9c29060936aa812c2b8aefb14258c


UPX Malicious Library PE File PE32 VirusTotal Malware Check memory Windows DNS crashed 		1 2.4 M 15 ZeroCERT

10852 2021-08-04 09:44 vbc.exe  

a4e87c684a48d0b140509540dd333232


UPX Malicious Library PE File OS Processor Check PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 9.2 M 33 ZeroCERT

10853 2021-08-04 09:45 dol.exe  

88c0c0351d382b0f70cc2fc739a69a2d


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware unpack itself DNS 		1 2.0 M 19 ZeroCERT

10854 2021-08-04 09:47 reader.jar  

62f16f566ecdf99cfc14e82dadf0f18e


UPX Malicious Library PE File OS Processor Check DLL PE32 Malware download Cobalt Strike Ursnif VirusTotal Malware MachineGuid Check memory buffers extracted Creates executable files RWX flags setting unpack itself Check virtual network interfaces suspicious process Windows Java ComputerName crashed 		5 5 3 5 5.2 M 6 ZeroCERT

10855 2021-08-04 09:47 toolspab1.exe  

91ccb93b3a8db0980cb4b024ae40f69c


UPX Malicious Library AntiDebug AntiVM PE File PE32 Malware PDB Code Injection Checks debugger buffers extracted unpack itself DNS 		1 7.0 M ZeroCERT

10856 2021-08-04 09:48 New_002728770031.exe  

644f29b49816a65b5c827a7f1955aa39


RAT Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 13.8 M 36 ZeroCERT

10857 2021-08-04 09:49 sya.exe  

f935b6c7f24be477a23044fa9a9dc9a5


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware unpack itself DNS 		1 2.4 M 31 ZeroCERT

10858 2021-08-04 09:54 bincrypted.exe  

059b1244ac9fda54de086692db4b5a08


Formbook UPX Malicious Library PE File OS Processor Check PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Malicious Traffic unpack itself 		24 25 2 5.2 M 41 ZeroCERT

10859 2021-08-04 09:54 app.dll  

2f3c83a9b7d37b99c603a28d09c74cc6


UPX Malicious Library PE File OS Processor Check DLL PE32 Malware download Cobalt Strike Ursnif VirusTotal Malware PDB MachineGuid unpack itself Windows ComputerName 		8 3 2 8 2.8 M 9 ZeroCERT

10860 2021-08-04 09:57 32576e926d5ca198c9979adda70c82...  

4003498f5c38cf05a71125d4e8745791


UPX Malicious Library PE File PE32 VirusTotal Malware Check memory Windows crashed 		2.0 M 27 ZeroCERT

keyword