popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11536 2021-08-19 19:15 rob122DzjsdFA.dll  

1ad0ef26e95163677b3dc9cc45a707c1


UPX Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check DLL PE32 Dridex TrickBot VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName Remote Code Execution DNS crashed 		20 14 4 1 11.4 16 ZeroCERT

11537 2021-08-19 19:17 ifeanyizx.exe  

24122b4238300a247b93bcca000ba531


NPKI Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		1 10.0 17 ZeroCERT

11538 2021-08-19 19:17 insta.exe  

11a79a566d71be64898643e5d9c47d1f


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10.6 M 26 ZeroCERT

11539 2021-08-19 19:20 msword.exe  

389c1a165c6169966cee944569e9ad35


email stealer Generic Malware Admin Tool (Sysinternals etc ...) DNS Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		2 11.2 23 ZeroCERT

11540 2021-08-19 19:22 redtank.png  

1618f8ae8ee070d71010a20d21b5e856


AntiDebug AntiVM PE File DLL PE32 Dridex TrickBot Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Kovter ComputerName Remote Code Execution DNS crashed 		19 14 4 14 10.8 M ZeroCERT

11541 2021-08-19 19:22 sureboizx.exe  

0740ebf29c02a6f39536c40cd318e3ba


Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		1 9.6 M 24 ZeroCERT

11542 2021-08-19 19:22 templezx.exe  

ff3570efe3c65339988cab633a78c030


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 11 5 13.8 M 29 ZeroCERT

11543 2021-08-19 19:24 vbc.exe  

1ba29471321f0be5a3064e6c226fb80d


PE File OS Processor Check PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software 		1 2 6 1 8.2 M 22 ZeroCERT

11544 2021-08-19 19:26 22.exe  

8dcb2324f286af46e7127586f36c9c09


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 4.0 34 ZeroCERT

11545 2021-08-20 05:42 CERT.RSA  

03b2afe6c95dbc9b5f1082002f363414


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		3.8 guest

11546 2021-08-20 07:52 invoice.wbk  

26b33f4a460b096e9840af920f18547f


RTF File doc AntiDebug AntiVM Malware download Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS DDNS crashed 		4 6 6.2 M ZeroCERT

11547 2021-08-20 07:52 fish.exe  

820abc3428b3155ad6aaeb767ea561e0


Generic Malware Admin Tool (Sysinternals etc ...) UPX DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 1 14.6 35 ZeroCERT

11548 2021-08-20 07:54 saint.xlsx  

39c183d75831c185a6ca1459f8b6fb49


Generic Malware Anti_VM MSOffice File Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS DDNS crashed 		1 4 6 5.8 19 ZeroCERT

11549 2021-08-20 07:56 nass.exe  

12cf41794cd41156c4f43c26cff1c740


Generic Malware UPX DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 1 14.6 30 ZeroCERT

11550 2021-08-20 09:15 147162461.exe  

48686c7f0d51dd91141ce266623a3941


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 49 ZeroCERT

keyword