popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11386 2021-08-17 09:54 bHiq3IZ1xoLA.php  

ffc642eb82de920453e88f647fb4c246


Malicious Packer Malicious Library PE File DLL PE32 unpack itself Windows crashed 		1.6 ZeroCERT

11387 2021-08-17 09:56 dow-2.exe  

79ccfb5a40b349d6012a35b7072f9f1a


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		16 17 2 8 8.8 M 30 ZeroCERT

11388 2021-08-17 09:56 bobbyzx.exe  

37a5f6cc78f098591dd05bf7dccbdcc5


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.4 M 32 ZeroCERT

11389 2021-08-17 09:58 dow-01.exe  

815a3dbde4d501e96222d6de9b0be3fc


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		18 18 2 12 8.4 M 31 ZeroCERT

11390 2021-08-17 09:59 rundll32.exe  

3a77a27df8d701a07b76d63091465c11


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.0 M 36 ZeroCERT

11391 2021-08-17 09:59 dow-0.exe  

53d55c75030ff7d58afd45080fa00dd2


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself Windows utilities AppData folder Windows 		10 25 2 7 5.0 M 43 ZeroCERT

11392 2021-08-17 10:01 vbc.exe  

2e11cb22fcff3e1fbf803fea30380e75


UPX Malicious Library PE File PE32 VirusTotal Malware unpack itself Tofsee Remote Code Execution crashed 		1 2 1 3.8 M 45 ZeroCERT

11393 2021-08-17 10:03 .svchost.exe  

c8f7096833654a62280f5897fccfde65


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process VMware anti-virtualization Windows ComputerName Cryptographic key Software 		1 4 1 12.2 M 27 ZeroCERT

11394 2021-08-17 10:05 vbc.exe  

61521d238c7c60ca7e91881ffda4a5fa


UPX Malicious Library PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 1 7.0 M 40 ZeroCERT

11395 2021-08-17 10:07 dllhost.exe  

5ee375628c34cd0aa0833e24bc31087a


RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 7.4 M 26 ZeroCERT

11396 2021-08-17 10:15 zxcv.EXE  

575f6a65c28682f88fa808ba8e862d7f


PWS Loki[b] Loki.m Raccoon Stealer Gen1 Gen2 Generic Malware UPX Malicious Library Malicious Packer DNS Socket KeyLogger HTTP Internet API ScreenShot Http API Steal credential AntiDebug AntiVM PE File PE32 DLL OS Processor Check GIF Format JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee Ransomware OskiStealer Stealer Windows Browser Email ComputerName DNS crashed Password 		13 6 5 21.8 M 42 ZeroCERT

11397 2021-08-17 10:20 Quranic Arabic Language Course...  

6af2470805fe10cf881871a6babf9986

VirusTotal Malware RWX flags setting unpack itself Tofsee 		2 2 1 2.4 M 3 ZeroCERT

11398 2021-08-17 13:35 vbc.exe  

2875b6d653a9311f91e1a2f28e5538e1


RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		6 14 1 5 9.2 M 39 ZeroCERT

11399 2021-08-17 13:36 2.dll  

37e26534b70abd664cfed4961ad6ecbf


UPX AntiDebug AntiVM PE File OS Processor Check DLL PE32 Dridex TrickBot VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Kovter ComputerName DNS crashed 		11 8 4 10.4 M 6 ZeroCERT

11400 2021-08-17 13:36 vbc.exe  

8396573aa3039b144f584107f785b321


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself DNS 		3 3.0 M 30 ZeroCERT

keyword