popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11551 2021-08-20 09:17 fibo.exe  

18bd1660bcab90d7ae7236da4a070918


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName Remote Code Execution 		3 6 1 9.8 21 ZeroCERT

11552 2021-08-20 09:17 apines1.exe  

d942626640bd34a96b1887f24feeecf7


UPX Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 36 ZeroCERT

11553 2021-08-20 09:18 SavesrefruntimedlldriverMonito...  

a2226ebbc6b9170a8ce5c238dd2cfc68


RAT Generic Malware UPX Malicious Packer PE File OS Processor Check .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces AntiVM_Disk IP Check VM Disk Size Check Windows ComputerName DNS crashed 		5 3 1 6.4 38 ZeroCERT

11554 2021-08-20 09:23 smm.exe  

f06588724e79ef9502afe278ee0fc66d


RAT PWS .NET framework BitCoin Generic Malware UPX SMTP AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 8.8 M 36 ZeroCERT

11555 2021-08-20 09:23 file5.exe  

44186c5a72e2f2f7e6ccc9989f7b025f


Generic Malware Themida Packer PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		2 3 2 9.6 M 30 ZeroCERT

11556 2021-08-20 09:25 cd14.exe  

822591641c9d6d7cd6a12037c6b418d6


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 4.2 M 50 ZeroCERT

11557 2021-08-20 09:26 Bzboosttt.exe  

a055c5bf6726eaf334bb919722f0197d


PWS .NET framework NPKI Generic Malware PSW Bot LokiBot ZeusBot Admin Tool (Sysinternals etc ...) UPX KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware IoC Microsoft AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key 		4 3 8 14.8 M 29 ZeroCERT

11558 2021-08-20 09:32 install2285.exe  

8b0f8c97e965175050da42c13c111b7d


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 7.2 M 39 ZeroCERT

11559 2021-08-20 09:32 acd.exe  

3d1fdad54d7d8900613e79e555fa93ea


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 4 2 7.4 M 44 ZeroCERT

11560 2021-08-20 09:33 1109507197.exe  

9dc9f133beab8d851147917573119400


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 50 ZeroCERT

11561 2021-08-20 09:35 1048019981.exe  

d0aa9f9f1051d5ec09152411a540e392


UPX Malicious Library PE File PE32 PDB unpack itself Remote Code Execution 		1.2 M ZeroCERT

11562 2021-08-20 09:36 lipster.exe  

35878c80b3957a04c99270e45d66f3cc


Generic Malware UPX Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 49 ZeroCERT

11563 2021-08-20 09:37 rollerkind2.exe  

8592015a4beab9f11614e49ae3080bbb


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 33 ZeroCERT

11564 2021-08-20 09:38 sergey11.exe  

7b43102eac227f292e0534dbcd99e797


RAT PWS .NET framework Gen1 Gen2 BitCoin Generic Malware UPX Malicious Library Malicious Packer SMTP ScreenShot Http API Steal credential AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check VirusTotal Email Client Info Stealer Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser Email ComputerName DNS Cryptographic key 		5 6 4 16.6 M 38 ZeroCERT

11565 2021-08-20 09:39 vbc.exe  

c465f78b104d49976e2fda4921ceb312


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 4 1 8.2 M 28 ZeroCERT

keyword