popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11161 2021-08-10 10:40 sya.exe  

de74d8f4a95d6fe1f3d916191c88e034


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 23 ZeroCERT

11162 2021-08-10 10:42 myn.exe  

0b97f7e640adbb46c56fb1229d97a894


NPKI UPX Malicious Library OS Processor Check PE File PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware PDB MachineGuid Check memory buffers extracted WMI unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS DDNS crashed 		2 1 6.6 M 35 ZeroCERT

11163 2021-08-10 10:43 mn.exe  

4fbbb9db49ac6bfeddeaf2ac8a43ae38


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 23 ZeroCERT

11164 2021-08-10 10:45 bda.exe  

b9b5b54cf3469380c133057543a9362e


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 23 ZeroCERT

11165 2021-08-10 10:45 storm.exe  

de904e0d5b71c0c3d99430b61d40aae2


Gen2 NPKI RAT Formbook Emotet Gen1 Generic Malware Javascript ShellCode Malicious Library HWP PS PostScript Malicious Packer Anti_VM Admin Tool (Sysinternals etc ...) PE File PE32 MSOffice File OS Processor Check Emotet VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Checks debugger WMI Creates executable files ICMP traffic unpack itself Windows utilities suspicious process WriteConsoleW shadowcopy delete Turn off Windows Error Recovery notification window IP Check Tofsee Ransomware Windows ComputerName crashed 		4 5 2 14.4 M 29 ZeroCERT

11166 2021-08-10 17:39 S58.CARGO_2021.08.09.xlsb  

8420c97abd12c1aaad8f01a84c7a0181


VBA_macro VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process 		1 2 3.8 3 ZeroCERT

11167 2021-08-10 17:39 8724.js  

fab8e604d52f778cc2fc0eaebb60c43d


Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 10.0 4 ZeroCERT

11168 2021-08-10 17:41 76792.xls  

c27e15e92fc6401b37346e1356b358d6


VBA_macro MSOffice File RWX flags setting unpack itself 		0.8 ZeroCERT

11169 2021-08-10 17:44 .dllhost.exe  

c700731279dc3294e76a17a6f0269044


RAT Generic Malware .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.2 22 ZeroCERT

11170 2021-08-10 17:45 vbc.exe  

d7674428d2b9970b706165d4ab317c0a


RAT Generic Malware UPX Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 1 11.8 M 12 ZeroCERT

11171 2021-08-10 17:47 HFG.exe  

d75e198aabc8f95796bd8a8cd15a5313


Generic Malware Malicious Packer DNS AntiDebug AntiVM .NET EXE PE File PE32 Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 14.0 21 ZeroCERT

11172 2021-08-10 17:49 Vidik.exe  

d307a9934a5fd7513c731373c5786579


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.4 23 ZeroCERT

11173 2021-08-10 17:49 document.doc  

db3ea85d5a4ce443a1beb72e682dbb35


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 3 13 4.6 33 ZeroCERT

11174 2021-08-10 17:51 XDF.exe  

9cc283969b75e69c196e8661fea9f7ed


Generic Malware Malicious Packer DNS AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 14.0 M 28 ZeroCERT

11175 2021-08-10 17:52 bank.exe  

e92cb564767afb2d59b12ecfc97ed86a


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		3 6 1 10.4 M 34 ZeroCERT

keyword