popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11491 2021-08-19 09:43 texts.exe  

dc1cbeeae12fd82cbbab918c6037b965


Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.6 M 30 ZeroCERT

11492 2021-08-19 09:44 vbc.exe  

46b2b8e7621a93ae6b876b071da55212


UPX Malicious Library AntiDebug AntiVM PE File OS Processor Check PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself Remote Code Execution 		3 8 1 1 8.4 M 46 ZeroCERT

11493 2021-08-19 09:45 microsoft.exe  

1edf6239fdc16549861e1b187c396ce2


email stealer Generic Malware DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows Cryptographic key crashed 		9.8 M 32 ZeroCERT

11494 2021-08-19 09:47 doc.exe  

e6ae96286fa8a92b9cd34d39a8170c29


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10.6 M 23 ZeroCERT

11495 2021-08-19 09:48 fish.exe  

3306d43a83c6d6c58cee03e51617ee21


Generic Malware Admin Tool (Sysinternals etc ...) UPX DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 1 14.6 M 30 ZeroCERT

11496 2021-08-19 09:49 vbc.exe  

f5dd75dff7af606ddb23acee9872b6b2


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		29 30 2 18 10.4 M 25 ZeroCERT

11497 2021-08-19 09:49 123.exe  

f9fd13cdacab6e8e8a57b6d48c2434f4


Generic Malware Themida Packer Anti_VM PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.4 M 26 ZeroCERT

11498 2021-08-19 09:50 AugustFotosAlbom.exe  

8195a17c3ec5f3df03202016050a456b


Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB MachineGuid Check memory Checks debugger RWX flags setting unpack itself suspicious process Tofsee Interception 		2 3 3.2 10 ZeroCERT

11499 2021-08-19 09:52 docx.exe  

060d51548927a76054327f8d17aca3a1


RAT PWS .NET framework email stealer Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		1 11.0 M 27 ZeroCERT

11500 2021-08-19 09:52 richyzx.exe  

0951bbdc6abd651b72cbc6fd5c06a95a


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.0 M 28 ZeroCERT

11501 2021-08-19 09:54 kl4.exe  

ec10291029375563c6f4f5151700e789


Generic Malware Themida Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		2 3 2 1 10.0 M 23 ZeroCERT

11502 2021-08-19 09:55 excel.exe  

d91aec7f3d8b6583ead18b236e082c01


AgentTesla(IN) RAT Generic Malware Malicious Library Malicious Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Checks debugger exploit crash unpack itself Windows Exploit Browser Email Cryptographic key Software crashed 		7.0 M 50 ZeroCERT

11503 2021-08-19 09:56 DOC.exe  

529e59864d8d624d0b6f50ed3f29ab1a


email stealer Generic Malware DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS Cryptographic key DDNS crashed 		2 1 15.2 M 24 ZeroCERT

11504 2021-08-19 10:01 gg.exe  

e2d90156ab03ca59299b499a70cd598d


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 7.4 M 43 ZeroCERT

11505 2021-08-19 10:01 lv.exe  

21251e40d18b7366c30efacb9f2f45a3


Emotet Gen1 NPKI Gen2 Malicious Library UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiD VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 6.6 M 23 ZeroCERT

keyword