popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11251 2021-08-12 09:27 sufile.exe  

5cde664f12547b26f2f59237c49b9acf


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 23 ZeroCERT

11252 2021-08-12 09:27 pdf_r34567888.html  

ee3ae3fe9474fecf7c86d4e4acd283f1


Antivirus AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 ZeroCERT

11253 2021-08-12 09:29 .dllhost.exe  

b34575c36f5e24cd748b8cac361f7009


Loki PWS Loki[b] Loki[m] Formbook .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 1 14.0 M 18 ZeroCERT

11254 2021-08-12 09:32 sefile.exe  

9008fe6b62bc7b920591cf8cb77d6f85


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 22 ZeroCERT

11255 2021-08-12 09:36 3.php  

26a5a30af2a8f19775fb79d1679052e6


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.0 M 38 ZeroCERT

11256 2021-08-12 09:36 s1TTNviXUaN2.exe  

2caaab498a0de0953706637fd3eb7c89


BitCoin Generic Malware AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 10.4 M 34 ZeroCERT

11257 2021-08-12 09:37 refno.exe  

13baeeeb8178269bd06665b3eda11aa6


RAT PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) Socket AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process AppData folder Windows Cryptographic key 		8 15 1 7 10.4 M 33 ZeroCERT

11258 2021-08-12 09:37 refno1.exe  

c8ca6a9423c0c873479cf9a884725497


Formbook RAT PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		17 17 1 15 8.8 M 32 ZeroCERT

11259 2021-08-12 09:38 pdf_rg234999233.html  

173908860f96edf15b0c592c7dad07bb


Antivirus AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 M ZeroCERT

11260 2021-08-12 09:41 vbc.exe  

da8a93ada0a33e6df7f52f8a7c1726b1


PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 9.4 M 18 ZeroCERT

11261 2021-08-12 09:43 vbc.exe  

cfdbd2b514b9d9b09e0c52c21c972385


PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 8.6 M 23 ZeroCERT

11262 2021-08-12 09:45 Shapeless.exe  

69e5b67145f3dd4879642cb809a413bc


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 50 ZeroCERT

11263 2021-08-12 09:45 JavaE.dll  

309661983ec46afb1868c9b8954d6b5e


Malicious Packer Malicious Library DLL PE File PE32 VirusTotal Malware 		0.6 M 17 ZeroCERT

11264 2021-08-12 09:49 cd20abfd34fb6042d0c7450da9e61a...  

067c339dcdcb526383f64a591eca6d97


UPX Malicious Library PE File PE32 VirusTotal Malware Check memory Windows crashed 		2.2 M 39 ZeroCERT

11265 2021-08-12 10:50 12.msi  

300db1ac0bba0b2e9904738e1607f279


MSOffice File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Tofsee ComputerName DNS 		1 3 1 4.8 8 ZeroCERT

keyword