popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11461 2021-08-18 18:24 vbs1.html  

4b71de199adad75c4855194892a50ad6


Antivirus AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 ZeroCERT

11462 2021-08-18 18:24 vbs2.html  

67ed5f11f9aa46861acce576429764e8

crashed 		0.2 ZeroCERT

11463 2021-08-18 18:28 vbs3.html  

17b23462cc955078526a6fde4746fa4a


Antivirus AntiDebug AntiVM Malware powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows ComputerName Cryptographic key 		1 2 1 1 10.0 M ZeroCERT

11464 2021-08-18 18:29 vbs2.html  

67ed5f11f9aa46861acce576429764e8


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 ZeroCERT

11465 2021-08-18 18:34 P7GlorySp.exe  

25d7926bab3ac72827a1c1fba9271527


Generic Malware PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee Windows Browser Cryptographic key Software crashed 		8 4 1 7.6 18 ZeroCERT

11466 2021-08-18 18:34 JoSetp.exe  

e001b45815b1982e6334eb348b1684fd


Generic Malware PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee Windows Browser DNS Cryptographic key Software crashed 		8 5 1 8.4 23 ZeroCERT

11467 2021-08-18 18:35 sap-4.exe  

968413e19e1fb423c105f3ff8de374b5


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		2.8 M 33 ZeroCERT

11468 2021-08-18 18:36 kl2.exe  

c7e14c804236547344b4413772a9ad33


RAT Generic Malware Anti_VM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		2 3 1 1 9.8 M 16 ZeroCERT

11469 2021-08-18 18:38 sap-2.exe  

552b42748a41dac8072808184773620f


Generic Malware Admin Tool (Sysinternals etc ...) UPX AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		4 10 1 4 9.4 M 36 ZeroCERT

11470 2021-08-18 18:39 sap-3.exe  

16d3dfd57d961c73033beb16a80b6728


RAT Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		18 18 1 18 8.8 M 32 ZeroCERT

11471 2021-08-18 18:47 Straight.exe  

1637661fced5903b3db6ad8f4633a729


NPKI Malicious Library UPX DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PE File PE32 OS Proce Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 4 2 1 16.6 M 25 ZeroCERT

11472 2021-08-18 18:48 22.exe  

dfd446df8d5951a2f84b6690fcd12387


RAT BitCoin Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 5 2 11.6 M 22 ZeroCERT

11473 2021-08-18 18:50 sap-055.exe  

74cfa68466e906ff582929d714fa6755


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7 16 1 7 8.0 M 17 ZeroCERT

11474 2021-08-18 18:50 sap-5.exe  

9f32b6c7db4f796c44ab518f698f32ce


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		14 15 3 14 9.6 M 28 ZeroCERT

11475 2021-08-18 18:51 sap-01.exe  

af562eff56d983eb266f4177962d4842


Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.0 M 34 ZeroCERT

keyword