popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11011 2021-08-06 16:42 81vy8extract.exe  

902bf3ec932ad1d22584f7c30c35f65e


Gen2 RAT Gen1 Generic Malware UPX Malicious Library OS Processor Check .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself suspicious process WriteConsoleW ComputerName 		2.8 13 ZeroCERT

11012 2021-08-06 16:44 .csrss.exe  

ef5105caed1d432aca814ba5eb4b9d90


UPX Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 M 31 ZeroCERT

11013 2021-08-06 16:45 1c3c9watch.exe  

fd18bd8ec985410ddfe371dda8acb47f


RAT Generic Malware Antivirus DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Email Client Info Stealer Malware PDB Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process installed browsers check Windows Browser Email 		4.8 7 ZeroCERT

11014 2021-08-06 16:47 82ig9helloworld.exe  

af36e389777e2b33f4c2f785203d5c77


RAT Generic Malware Antivirus DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Email Client Info Stealer Malware PDB Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process installed browsers check Windows Browser Email 		4.8 9 ZeroCERT

11015 2021-08-06 16:47 mazx.exe  

e1ad89d88c9ffed81a10e3b2e7a323c1


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3 6 1 9.4 M 23 ZeroCERT

11016 2021-08-06 16:50 olde.exe  

0144a7d3ea564aa29856fc657c53c96b


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP Escalate priviledges AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		9 19 2 6 9.2 M 9 ZeroCERT

11017 2021-08-06 16:50 olde-2.exe  

e2e4c5d869ec7bdb5dd1b8fae00f929a


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		16 15 2 12 8.6 M 23 ZeroCERT

11018 2021-08-06 16:51 oMJtjs4a49CPQ7j.exe  

d407e86fb5c5596f51c80d08c5bce3a2


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 13.4 M 31 ZeroCERT

11019 2021-08-07 13:53 installs.exe  

bf77f4e4b7d99180cd03145e877c3638


RAT PWS .NET framework Generic Malware UPX OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 7.2 33 ZeroCERT

11020 2021-08-07 13:58 vbc.exe  

442d2d8a7820a1c0c0ba418476d67fb0


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		19 25 2 8 11.8 M 39 ZeroCERT

11021 2021-08-07 13:58 waads.exe  

c47ad106639801ac97d4d676dbc700ec


UPX Malicious Library Socket KeyLogger ScreenShot AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted RWX flags setting unpack itself Browser ComputerName DNS 		3 1 2 8.4 M 54 ZeroCERT

11022 2021-08-07 13:58 11.exe  

a3cd270378287770bdd9fdb2b59e5588


Generic Malware Themida Packer Anti_VM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware Cryptographic key Software crashed 		2 4 2 10.0 M 37 ZeroCERT

11023 2021-08-07 14:00 askinstall40.exe  

a86d2af2833f8cc15ad5bca904660fad


Gen2 Trojan_PWS_Stealer NPKI Emotet RAT Credential User Data Generic Malware UPX Malicious Packer Malicious Library SQLite Cookie Admin Tool (Sysinternals etc ...) Anti_VM ASPack Antivirus OS Processor Check PE File PE32 ELF PNG Format PE64 DLL MSOffic Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName Remote Code Execution crashed 		4 8 1 3 11.2 M 41 ZeroCERT

11024 2021-08-07 14:02 askinstall53.exe  

9192eed4f3433a1fe590754041c0a0cf


Gen2 Trojan_PWS_Stealer NPKI Emotet RAT Credential User Data Generic Malware UPX Malicious Packer Malicious Library SQLite Cookie Admin Tool (Sysinternals etc ...) Anti_VM ASPack Antivirus OS Processor Check PE File PE32 ELF PNG Format PE64 DLL MSOffic Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder WriteConsoleW installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName Remote Code Execution DNS crashed 		4 9 1 3 11.8 M 51 ZeroCERT

11025 2021-08-08 17:25 229c945c-ac44-4a8b-b053-d4311b...  

d3211bc1dfe0bcfd47cfc0ac5a11f1b2


JPEG Format 		guest

keyword