popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11266 2021-08-12 11:00 edi.exe  

586f79d31e3b60f3737c247810e56612


NPKI Gen1 Generic Malware UPX Malicious Packer Malicious Library Antivirus ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer NetWireRC VirusTotal Email Client Info Stealer Malware powershell Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic unpack itself suspicious process AppData folder WriteConsoleW Ransomware BitRAT Windows Browser Email ComputerName Cryptographic key Software crashed keylogger Password 		5 3 24.4 M 20 ZeroCERT

11267 2021-08-12 13:47 .svchost.exe  

8056c1da01723959661caf103a001271


GuLoader Generic Malware Malicious Packer UPX Malicious Library PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		1.8 M 17 r0d

11268 2021-08-12 13:52 vbc.exe  

da8a93ada0a33e6df7f52f8a7c1726b1


PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 8.0 M 18 r0d

11269 2021-08-13 09:44 sw.exe  

1d8f32a4bcd066413acbb8c4bf6037c9


Gen2 Generic Malware Malicious Packer Anti_VM UPX Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Windows Remote Code Execution Firmware DNS Cryptographic key crashed 		1 1 6.2 24 ZeroCERT

11270 2021-08-13 09:45 bobbyzx.exe  

9a813a694390804d6d8cc05ac1efe79f


PWS Loki[b] Loki.m AgentTesla ftp Client info stealer email stealer Generic Malware PSW Bot LokiBot ZeusBot Admin Tool (Sysinternals etc ...) DNS Socket Escalate priviledges ScreenShot Steal credential persistence AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer Malware download FTP Client Info Stealer Pony VirusTotal Email Client Info Stealer Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications AppData folder malicious URLs WriteConsoleW installed browsers check Windows Update Browser Email Cryptographic key Software Downloader 		1 2 4 15.0 39 ZeroCERT

11271 2021-08-13 09:46 runvd.exe  

a945644533a405a16423fbf5b9a37069


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 26 ZeroCERT

11272 2021-08-13 09:47 plugmanzx.exe  

864e2a02a8da7f5829616b793608b6a5


Generic Malware Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM .NET EXE PE File PE32 Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 14.0 35 ZeroCERT

11273 2021-08-13 09:48 Rx4.exe  

cebd70129181b2d00175a09425028661


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 26 ZeroCERT

11274 2021-08-13 09:49 wealthzx.exe  

a36b4d2566935944f7281dae1be18d5b


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		1 11.8 27 ZeroCERT

11275 2021-08-13 09:53 sa.exe  

d32c07f78a2d47bd5b916231eae4e322


RAT PWS .NET framework Generic Malware AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces AppData folder Tofsee Windows DNS Cryptographic key crashed 		4 9 4 14.0 22 ZeroCERT

11276 2021-08-13 09:53 mazx.exe  

bd2c6dc178b0c292a9f6d62a1c4121a4


Generic Malware Admin Tool (Sysinternals etc ...) ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD Windows DNS Cryptographic key 		2 4 4 1 8.6 M 34 ZeroCERT

11277 2021-08-13 09:55 sww.exe  

c7ece25f5f2bec6d7287b7a531e14d44


RAT PWS .NET framework Generic Malware AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows DNS Cryptographic key crashed 		7 14 2 13.2 26 ZeroCERT

11278 2021-08-13 09:55 SteamUpdates.exe  

bfbc4e524ead489dcd8939c17bba7071


Generic Malware AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows crashed 		8.8 M 18 ZeroCERT

11279 2021-08-13 09:55 abc.exe  

bb6e3f99be7215c2afe4de4e80805ddb


RAT PWS .NET framework Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.2 M 44 ZeroCERT

11280 2021-08-13 09:58 ejikezx.exe  

f214b97d081f549c3527c0b1f2631b21


Formbook PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 13.8 M 39 ZeroCERT

keyword