popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11281 2021-08-13 10:02 nnv.exe  

af2ee0b683302aedb51ba90fde89e947


PWS Loki[b] Loki.m RAT Gen1 Gen2 Generic Malware Malicious Packer UPX Malicious Library DNS Socket KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM .NET EXE PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Ransomware Browser Email ComputerName DNS Software 		1 1 2 16.4 M 45 ZeroCERT

11282 2021-08-13 10:02 xds.exe  

9192c2363847689ba2d28c05c4c04c6c


RAT PWS .NET framework Generic Malware .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows DNS Cryptographic key crashed 		1 3 1 6.6 M 31 ZeroCERT

11283 2021-08-13 10:04 bin.exe.bin  

fe8953e299b378a06e2345d0ee75f710


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware Check memory unpack itself DNS crashed 		1 2.8 M 14 ZeroCERT

11284 2021-08-13 10:19 b4cfc49d647ebeffb99579dbd4be2a...  

b594afc619b7f19b04c125b093ddb099


CobaltStrike Generic Malware Malicious Packer UPX Malicious Library PE File PE64 VirusTotal Malware unpack itself crashed 		2.0 19 r0d

11285 2021-08-13 20:03 wvieedr.exe  

06a029882deabf229f62728afe3baf4f


UPX Malicious Library AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself 		7.6 42 ZeroCERT

11286 2021-08-13 20:04 .dllhost.exe  

a6ddea61a510a4df6968fcfc929150a4


Loki PWS Loki[b] Loki.m .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 1 12.6 M 21 ZeroCERT

11287 2021-08-13 20:07 312321312312_.exe  

733546d80cc58bf61df0f32cd9f78bec


RAT PWS .NET framework BitCoin Generic Malware UPX Malicious Library AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Cryptographic key Software crashed 		2 4 2 1 11.6 M 14 ZeroCERT

11288 2021-08-13 20:08 .svchost.exe  

a1c4645815d0ab06831f62042cfa0da0


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process VMware anti-virtualization Windows ComputerName Cryptographic key Software 		1 3 1 12.4 M 32 ZeroCERT

11289 2021-08-13 20:10 runtimebroker.exe  

fcce9e904debca11888ba8898e9dca46


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 27 ZeroCERT

11290 2021-08-13 20:12 %E8%BD%AF%E4%BB%B6%E6%8E%88%E6...  

ca0bfb0e149468f828793f18cd1db393


Generic Malware UPX Malicious Library PE File PE32 Malware download VirusTotal Open Directory Malware AutoRuns Check memory Creates executable files RWX flags setting AntiVM_Disk sandbox evasion VM Disk Size Check Windows Exploit Browser DNS 		1 2 8 6.2 M 58 ZeroCERT

11291 2021-08-13 20:12 GetFile2  

bebccbf007e6833633716dd855003acf


RAT Generic Malware UPX DLL .NET DLL PE File PE32 VirusTotal Malware DNS 		1 1.6 M 19 ZeroCERT

11292 2021-08-13 20:14 refno.exe  

2c886fae28caeeeb3b0ada64f64abfb9


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.2 M 22 ZeroCERT

11293 2021-08-13 20:17 .csrss.exe  

9de20bb57302eb4bd57152d375e2f826


Lokibot PWS Loki[b] Loki.m .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 1 14.6 M 23 ZeroCERT

11294 2021-08-13 20:20 vbc.exe  

a258ac40b5c62c1ac1124ace071c69dd


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		9 18 1 8.2 M 27 ZeroCERT

11295 2021-08-13 20:24 bum.exe  

24fa9768014a79d9193de95aebdd6e4f


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8 19 2 8 8.6 M 17 ZeroCERT

keyword