popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11446 2021-08-18 11:31 winDriversavesruntimecrt.exe  

728f3575ead222e4e13b9558291547be


RAT Generic Malware UPX Malicious Packer PE File OS Processor Check .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check Windows ComputerName DNS crashed 		5 1 5 7.4 M 32 ZeroCERT

11447 2021-08-18 11:32 Insidious.exe  

f3d648c4f3a0f9cfbead90e546efe8f6


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Browser Software crashed 		4.4 M 47 ZeroCERT

11448 2021-08-18 11:34 oy.exe  

0dad0861840cb73b4cefce3dcce28fa5


RAT PWS .NET framework Generic Malware Themida Packer Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 OS Processor Check Browser Info Stealer VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Checks Bios Detects VMWare Check virtual network interfaces AppData folder VMware anti-virtualization Windows Browser ComputerName Firmware Cryptographic key crashed 		1 2 9.8 M 42 ZeroCERT

11449 2021-08-18 11:35 anydeck.exe  

5b2efc41e60b436ff9bce0ae4f8fd30a


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		2 2.4 M ZeroCERT

11450 2021-08-18 11:37 dchampzx.exe  

44dd47401b94e056b009905fe584806f


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		2.8 M 39 ZeroCERT

11451 2021-08-18 11:37 wango666.exe  

a9d35b3546a908c804d177020daefcb0


Gen2 Gen1 RAT Generic Malware UPX Malicious Library Malicious Packer Anti_VM ScreenShot Downloader DNS Socket PDF AntiDebug AntiVM PE File OS Processor Check PE32 .NET DLL DLL PNG Format PE64 JPEG Format Malware download Amadey VirusTotal Malware Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check DNS 		2 1 2 8.0 M 37 ZeroCERT

11452 2021-08-18 11:40 jopa.exe  

3f472c0afd077919abb0a3ddb2378135


RAT Generic Malware UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS Processor Check .NET EX VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS 		1 1 1 9.4 M 45 ZeroCERT

11453 2021-08-18 11:41 vbc.exe  

e52bb3fd16b1b414bfef8462c4091b3b


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.0 M 25 ZeroCERT

11454 2021-08-18 11:44 @aran_welaso20.exe  

c94fcdb866e1e3a9af205bd27664d492


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 4.0 M 38 ZeroCERT

11455 2021-08-18 12:00 0817_5286872558.doc  

a87db9de6caf60bbd55e1a8b9805a3a0


VBA_macro MSOffice File unpack itself 		1.6 ZeroCERT

11456 2021-08-18 12:01 0817_0384716421.doc  

fde9b8d089fa03841c9981f98ba15abb


VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 8.2 ZeroCERT

11457 2021-08-18 12:03 0817_7648681625.doc  

0673071e945646c58d6bc06d20cd88de


VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 7.4 ZeroCERT

11458 2021-08-18 12:06 Proformar invioce.exe  

a311cef429085f54e95b32fd836c56b6


AgentTesla RAT browser info stealer Generic Malware Google Chrome User Data Admin Tool (Sysinternals etc ...) Socket Sniff Audio Escalate priviledges KeyLogger Code injection Internet API Downloader persistence DGA DNS Create Service HTTP FTP ScreenShot H VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities WriteConsoleW Windows Cryptographic key 		11.0 26 ZeroCERT

11459 2021-08-18 16:13 jkfe.exe  

5c3ebb5dfa876c0d76ccae99518153d8


Malicious Library VMProtect PE File PE32 DLL OS Processor Check VirusTotal Malware AutoRuns Check memory Creates executable files Windows utilities suspicious process AppData folder Windows DNS 		1 4.8 43 ZeroCERT

11460 2021-08-18 16:37 vbs1.html  

4b71de199adad75c4855194892a50ad6


Antivirus unpack itself crashed 		0.6 ZeroCERT

keyword