popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11296 2021-08-13 20:26 brownzx.exe  

6f75f32ed9c7c697dbf8baff60b3a22f


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.4 M 13 ZeroCERT

11297 2021-08-13 20:27 pysnake.exe  

eff22c6f6beec66c74ccd00fb1a4b708


Gen2 Gen1 Generic Malware UPX Malicious Library Malicious Packer Anti_VM PE64 OS Processor Check PE File DLL VirusTotal Malware Check memory Creates executable files unpack itself Ransomware 		2.8 11 ZeroCERT

11298 2021-08-13 20:29 bum-0.exe  

42d14493d70781dbb667f48ed49b3883


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		9 18 3 7 8.2 M 27 ZeroCERT

11299 2021-08-13 20:30 services.exe  

efc0f46f3fa314f232394e2cb781659f


PE File PE32 VirusTotal Malware AutoRuns suspicious privilege Creates executable files unpack itself Windows DNS 		1 2 1 4.6 M 57 ZeroCERT

11300 2021-08-13 20:33 update.dll  

c00d207efb855910154389b48404e550


Antivirus UPX Malicious Library OS Processor Check DLL PE File PE32 VirusTotal Malware Buffer PE Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser DNS Cryptographic key crashed 		2 5.0 M 37 ZeroCERT

11301 2021-08-14 09:20 bill.xlsm  

95efc56b74a992e18a361579a267c4f3


VBA_macro VirusTotal Malware RWX flags setting unpack itself Tofsee 		1 2 1 2.8 22 ZeroCERT

11302 2021-08-14 09:27 SKBM-120821.exe  

807a927252237ee6436724cbbcd05fa0


RAT PWS .NET framework Gen1 Generic Malware Malicious Packer UPX Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 OS Processor Check DLL JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check OskiStealer Stealer Windows Browser Email ComputerName Cryptographic key Password 		8 2 4 16.8 M 22 ZeroCERT

11303 2021-08-14 09:38 toor.exe  

f2c5f9df39fee2ca644154968920e444


Gen2 RAT Generic Malware Themida Packer Malicious Packer Anti_VM UPX Malicious Library OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		2 3 2 10.2 M 26 ZeroCERT

11304 2021-08-14 09:38 wsd.exe  

898f0ec3d9588199aa00da724447b5bb


UPX Malicious Library DGA DNS Socket Create Service SMTP Sniff Audio Escalate priviledges KeyLogger Code injection Internet API ScreenShot Downloader AntiDebug AntiVM OS Processor Check PE File PE32 VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Checks debugger buffers extracted unpack itself AppData folder malicious URLs Windows DNS keylogger 		1 13.2 M 25 ZeroCERT

11305 2021-08-14 09:39 arinzezx.exe  

becd8371316c6ce0003a3beb62b9b471


PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 12.2 M 29 ZeroCERT

11306 2021-08-14 09:40 123.exe  

900e57970906aaeaa5d53979fd3b6f41


RAT PWS .NET framework Generic Malware .NET EXE PE File PE32 VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself ComputerName crashed 		3.2 M 34 ZeroCERT

11307 2021-08-14 09:41 P2SDus.exe  

4b1cfa1207d89791b682f40c6c9fc01d


Generic Malware .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee Windows Browser DNS Cryptographic key Software crashed 		8 5 2 8.6 M 31 ZeroCERT

11308 2021-08-14 09:42 index.php  

ab275081299757d7948052046332a6ee


UPX Malicious Library OS Processor Check PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 22 ZeroCERT

11309 2021-08-14 09:43 makenobodyzx.exe  

1ea72895c4c7f412c3bd5aa4150a3a89


RAT PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.0 M 30 ZeroCERT

11310 2021-08-14 09:44 Downloader.exe  

9388365245c1d52f5aebc8a3ef352665


RAT Generic Malware Antivirus UPX Malicious Library .NET EXE PE File PE32 OS Processor Check VirusTotal Malware powershell PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AppData folder Windows ComputerName DNS Cryptographic key 		1 1 4 8.8 M 37 ZeroCERT

keyword