popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11371 2021-08-16 17:20 file1.exe  

efb3e6929403a295ee9f8a0dfcdd591c


RAT Generic Malware Anti_VM UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		2 4 2 9.0 M 26 ZeroCERT

11372 2021-08-16 17:21 askinstall52.exe  

ed8353cf1e80cb6afd65dedd1f83071a


Gen2 Trojan_PWS_Stealer Credential User Data Malicious Packer UPX Malicious Library SQLite Cookie PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB suspicious privilege WMI Creates executable files Windows utilities suspicious process WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution 		2 4 1 1 6.4 M 51 ZeroCERT

11373 2021-08-16 17:45 One Million British Pounds.pdf  

9b4e673fb8467b6dac5c13fff8db4213


PDF VirusTotal Malware 		0.6 17 guest

11374 2021-08-16 18:12 One Million British Pounds.pdf  

9b4e673fb8467b6dac5c13fff8db4213


PDF VirusTotal Malware Windows utilities Windows 		5 2.0 17 ZeroCERT

11375 2021-08-17 07:39 console-play.exe  

a43be7341e3d13810d20b9e64e329c83


Gen2 Gen1 RAT Generic Malware UPX Malicious Library Malicious Packer Anti_VM PE File OS Processor Check PE32 DLL PNG Format GIF Format .NET DLL PE64 VirusTotal Malware Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName crashed 		5.2 M 21 ZeroCERT

11376 2021-08-17 09:25 Simplydisk_TPEB_Tariff_CtoC_16...  

fd7075efa74442ec550ba1b0613f0db3


Malicious Packer Malicious Library PE File DLL PE32 VirusTotal Malware Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting unpack itself Windows utilities suspicious process Tofsee Windows ComputerName crashed 		5 4 1 7.2 9 ZeroCERT

11377 2021-08-17 09:26 unknown.exe  

fe51eac852001236448794e51ba22956


RAT PWS .NET framework Generic Malware PE File .NET EXE PE32 suspicious privilege MachineGuid Check memory Checks debugger unpack itself ComputerName 		1.6 ZeroCERT

11378 2021-08-17 09:33 sufile.exe  

0ca116299ae13d37e2368d09f208fd2d


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 42 ZeroCERT

11379 2021-08-17 09:34 plugmanzx.exe  

ec9dc86cbda5ad0a0b6c79654e361642


Generic Malware Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM PE File .NET EXE PE32 Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 14.2 M 30 ZeroCERT

11380 2021-08-17 09:36 mazx.exe  

1423f1e7d436fa26d50fd804f5b93431


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3 6 1 1 8.2 M 24 ZeroCERT

11381 2021-08-17 09:40 .wininit.exe  

73c3916832698d6d47cde8593d7816f8


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 4 2 10.0 M 40 ZeroCERT

11382 2021-08-17 09:42 vbc.exe  

3244a92cbba0f5edcae4ea2f2f0d1b7d


UPX Malicious Library PE File PE32 VirusTotal Malware unpack itself Remote Code Execution 		2.0 M 32 ZeroCERT

11383 2021-08-17 09:43 zxcvb.exe  

2cae1b3be4c37e8f0ca5dac99dbbac17


PWS Loki[b] Loki.m RAT Gen1 Gen2 Generic Malware UPX Malicious Library Malicious Packer DNS Socket KeyLogger HTTP Internet API ScreenShot Http API Steal credential AntiDebug AntiVM PE File .NET EXE PE32 JPEG Format DLL OS Processor Check GIF Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee Ransomware OskiStealer Stealer Windows Browser Email ComputerName DNS crashed Password 		13 6 8 24.4 M 15 ZeroCERT

11384 2021-08-17 09:45 planes.exe  

fa98ed9794e56f5598319a77831d6339


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		9.8 M 26 ZeroCERT

11385 2021-08-17 09:48 dow.exe  

fc610878793ee9ee26ed44da1549f4f8


RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8 13 1 8 9.6 M 27 ZeroCERT

keyword