popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10891 2021-08-05 08:00 empty_9qhg.dotm  

054bd3a599129af799c38de49cbfebed


VBA_macro VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process Tofsee 		10 12 2 3.8 15 ZeroCERT

10892 2021-08-05 09:37 2mZgSIB7mML3Ox00.jpg.ps1  

f296ea5238d07817af56dbbba4271b45


Antivirus VirusTotal Malware unpack itself WriteConsoleW Windows Cryptographic key 		1 1 1.4 12 guest

10893 2021-08-05 09:42 1852c5dbb4abba07766ee019366658...  

eb9d1220e5322bcfe4f35193376f9c41


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 46 ZeroCERT

10894 2021-08-05 09:43 filename.exe  

f67f17d54de5a1bab70766d6f9a124d2


Generic Malware UPX Malicious Library PE File PE32 PDB unpack itself Remote Code Execution 		1.6 M ZeroCERT

10895 2021-08-05 09:44 vbc.exe  

11607ed65e25126d80c7dd877f9f29eb


UPX Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware Check memory crashed 		2.0 M 21 ZeroCERT

10896 2021-08-05 09:45 CryMore2.exe  

f6f4de736422e2ce52eaf99b41edfe32


PWS .NET framework RAT Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Cryptographic key Software crashed 		2 4 2 7.0 M 33 ZeroCERT

10897 2021-08-05 09:47 NBYS%20ASM.NET.exe  

0d5eb410b67945e03382fa1781d573be


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName 		3.4 M 37 ZeroCERT

10898 2021-08-05 09:48 wwerfyr.exe  

3693d70402a26fa0810d8ea85c95c954


PWS Loki[b] Loki[m] .NET framework RAT Generic Malware DNS Socket KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE File .NET EXE PE32 Malware download Azorult VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows ComputerName Cryptographic key crashed 		2 4 3 12.2 M 40 ZeroCERT

10899 2021-08-05 09:49 rundll32.exe  

234e96fd91a8c8ba1da7e94609bd6827


PWS .NET framework RAT Generic Malware UPX PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself 		1.8 M 22 ZeroCERT

10900 2021-08-05 09:49 aridonorigin.exe  

686f21a796dda4dc4e72bd0130f16d8e


AgentTesla(IN) Generic Malware Malicious Packer Malicious Library PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.4 M 48 ZeroCERT

10901 2021-08-05 09:51 assadzx.exe  

61eb9d05a7a2dad154f0e0f92b16205d


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Socket Escalate priviledges KeyLogger Code injection HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Windows Browser Email ComputerName Cryptographic key 		12.6 M 21 ZeroCERT

10902 2021-08-05 09:53 both123.exe  

58a63044fe092b8c6e525cc920c04bc1


PE File PE32 VirusTotal Malware 		1.0 M 26 ZeroCERT

10903 2021-08-05 09:54 ggi8w3183a1077e104d07a84291d0d...  

2ab4cc984ec0b93b82c0e4bf03aa8c5f


Emotet Gen1 UPX Malicious Library AntiDebug AntiVM PE File DLL PE32 Dridex TrickBot VirusTotal Malware Report suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		18 11 5 9.6 M 12 ZeroCERT

10904 2021-08-05 09:55 gun-1.exe  

eab193344b506b1507675779ebf8c11b


Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		16 17 2 8 9.8 M 33 ZeroCERT

10905 2021-08-05 09:56 blaqzx.exe  

d39308847edb6c582c8e5ae9f625c004


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		1 9.6 M 26 ZeroCERT

keyword