popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10906 2021-08-05 09:57 vbc.exe  

c16b365ffaffa1804beeb266d79205ec


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware powershell Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key 		12 18 3 12.6 M 31 ZeroCERT

10907 2021-08-05 09:58 gun.exe  

873cf90c9a977554d65c523f433a96f8


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		1 2 6.4 M 17 ZeroCERT

10908 2021-08-05 09:58 document.wbk  

3fc1fda1b322148664c0906b2b3f21b3


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Tofsee Windows Exploit DNS Cryptographic key crashed Downloader 		1 3 7 1 5.4 M 33 ZeroCERT

10909 2021-08-05 10:00 gun-5.exe  

dcf861a4858cc95b9d2e9ec60969933e


Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.2 16 ZeroCERT

10910 2021-08-05 10:02 pub1.exe  

141a93e960b8490b9db17e609eb37d42


UPX Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 22 ZeroCERT

10911 2021-08-05 10:04 vbc.exe  

4ebdb80a36728294c6086c4ed91605b0


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		12 14 3 6 9.8 M 30 ZeroCERT

10912 2021-08-05 10:05 R3K3GVYVPP.exe  

10f5add22c17abbf6d49b1698f0883e5


PWS .NET framework RAT Generic Malware UPX PE File .NET EXE PE32 PNG Format JPEG Format Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces Tofsee Browser ComputerName DNS Software crashed 		5 6 3 1 6.8 M 50 ZeroCERT

10913 2021-08-05 10:06 gun-3.exe  

ff404b207167fe0cdeb456afcdc2ee4f


PWS .NET framework RAT Generic Malware UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows Cryptographic key 		7 14 1 7 11.6 M 31 ZeroCERT

10914 2021-08-05 10:07 SessionCrtSvcWinrefCrt.exe  

355f3e43422d9df559f51c8b836a2238


RAT Generic Malware Malicious Packer UPX DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS Processor Check .NET EXE VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key 		1 1 9.0 M 43 ZeroCERT

10915 2021-08-05 10:08 .wininit.exe  

4790a6bec0eb9efda12d2abe2bb38d00


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		12 12 1 2 9.8 M 34 ZeroCERT

10916 2021-08-05 10:09 nbys.aspx  

a6a737e2431ccb08b421808d2ade1140


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.0 M 16 ZeroCERT

10917 2021-08-05 10:12 cheat.exe  

b0e7ef4773c4319c4ae27ec4ea36b342


RAT Generic Malware Malicious Packer UPX Antivirus DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS Processor Chec VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key keylogger 		1 1 12.4 M 52 ZeroCERT

10918 2021-08-05 10:12 askinstall55.exe  

1219ec0cfe2e0dfa88dae43f713b1a94


Trojan_PWS_Stealer Gen2 NPKI BitCoin Credential User Data Generic Malware Malicious Packer UPX Malicious Library SQLite Cookie Anti_VM DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenS Browser Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution crashed 		4 8 1 3 11.4 M 51 ZeroCERT

10919 2021-08-05 10:15 GUN-2.exe  

b92376d5972be4bf3f100b17e978b6af


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		16 17 2 12 10.6 M 32 ZeroCERT

10920 2021-08-05 10:16 gun-4.exe  

3bba9f210c742796887179a14acfca42


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.6 M 31 ZeroCERT

keyword