popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10861 2021-08-04 09:59 zoom.doc  

e5ec8603bbcfe3820c59749a24641570


Malicious Packer UPX Malicious Library PE File OS Processor Check DLL PE32 Dridex TrickBot VirusTotal Malware suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS 		7 6 4 6.4 M 14 ZeroCERT

10862 2021-08-04 10:01 a24a7a925420fc48542f870656109f...  

a92922a71a9bf58cc2d95a6039c9a1b6


UPX Malicious Library PE File PE32 VirusTotal Malware Check memory Windows crashed 		2.2 M 31 ZeroCERT

10863 2021-08-04 10:07 0803_4233265847.doc  

6a3290e7ad1b96b6a10a94626cd1716a


VBA_macro DNS Socket ScreenShot AntiDebug AntiVM MSOffice File GIF Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Collect installed applications Check virtual network interfaces suspicious process suspicious TLD sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Stealer Windows Browser ComputerName Software 		6 12 6 21.0 M 7 ZeroCERT

10864 2021-08-04 10:12 7sdjhui32sof.exe  

270c3859591599642bd15167765246e3


Ficker Stealer UPX Malicious Library PE File PE32 VirusTotal Malware IP Check 		1 4 1 4.0 M 56 ZeroCERT

10865 2021-08-04 10:29 vbc.exe  

ecc19a6e75196aba87b243737d5fd361


PE File PE32 VirusTotal Malware 		1.4 M 15 ZeroCERT

10866 2021-08-04 10:41 .wininit.exe  

8dffb7cb10c04f3cef0a90e77304448b


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows Cryptographic key 		12 14 1 10.8 M 23 ZeroCERT

10867 2021-08-04 10:43 0803_1140088877.doc  

6376baf5eaead1abb0ec71546fd4e4b5


hancitor VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 8 1 1 9.6 M ZeroCERT

10868 2021-08-04 10:43 fineFB.exe  

76ade6d0feb5897a933dbca533be4ca1


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee crashed 		6 10 2 8.8 M 29 ZeroCERT

10869 2021-08-04 10:47 0803_6700186721.doc  

52e17e1d3122e3157cb40e9b57711bc6


hancitor VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 8 1 1 9.6 M ZeroCERT

10870 2021-08-04 10:57 vbc.exe  

ecc19a6e75196aba87b243737d5fd361


UPX Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware Check memory crashed 		1.8 M 15 r0d

10871 2021-08-04 12:18 document.xlsm  

3823aa0c8a9a48d236cce65b53bc9c6b


VBA_macro Antivirus VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger WMI Creates shortcut RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName Cryptographic key 		1 2 9.2 20 guest

10872 2021-08-04 12:20 heliocentrically.db  

106b947aa2e8101bff6e3ff0f82bfe95


Generic Malware Malicious Packer UPX Malicious Library Escalate priviledges AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware Code Injection unpack itself 		3.8 26 guest

10873 2021-08-04 12:26 document_set_20210208_T6253773...  

c2747012f95b22cb9b627a16bd62a7e6

VirusTotal Malware RWX flags setting unpack itself Tofsee 		2 2 2.2 15 guest

10874 2021-08-04 12:28 vbc.exe  

302f2eb940ca97b21128171b43cf20b7


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		5.6 37 guest

10875 2021-08-04 12:31 decree-08.03.2021.doc  

f6f72e3d91f7b53dd75e347889a793da


AntiDebug AntiVM Vulnerability VirusTotal Malware Code Injection Check memory RWX flags setting unpack itself suspicious process Interception 		1 2 6.6 14 guest

keyword