popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11566 2021-08-20 09:40 2009601830.exe  

db1629d2b1951b62e2d77a69dbc22750


RAT PWS .NET framework Generic Malware UPX SMTP AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.0 M 40 ZeroCERT

11567 2021-08-20 09:41 skin.exe  

35d246695f2bca9c07c187a2b41ca7e3


UPX PE File OS Processor Check PE32 VirusTotal Malware PDB 		1.4 M 24 ZeroCERT

11568 2021-08-20 09:46 sefile2.exe  

46153e33a9297cec0237938991f4f3d0


UPX Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 33 ZeroCERT

11569 2021-08-20 09:46 @seefeld_logs.exe  

d973a9816427d0da020942830752185a


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		3 5 3 1 7.8 M 44 ZeroCERT

11570 2021-08-20 09:52 BIN.exe  

4eb2be32690511a45844f521fa273dcb


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10.2 M 30 ZeroCERT

11571 2021-08-20 09:52 @fezyXZ.exe  

5f63bc0d54eef42f51aa2f124b1971b1


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		3 5 3 1 7.4 M 41 ZeroCERT

11572 2021-08-20 09:54 2084414845.exe  

af23965c3e2673940b70f436bb45f766


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 50 ZeroCERT

11573 2021-08-20 09:54 HZUWUM5pprq6yKV.exe  

3616925290acd4f40efd5a3889f3d3f1


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) HTTP Internet API Http API Downloader AntiDebug AntiVM PE File .NET EXE PE32 GIF Format VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself sandbox evasion WriteConsoleW Tofsee Windows Browser Cryptographic key 		2 4 2 10.0 M 19 ZeroCERT

11574 2021-08-20 09:56 rollerkind.exe  

b6b054b0a63ed8e89b4a55c1679b8743


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 32 ZeroCERT

11575 2021-08-20 09:58 vbc.exe  

26d0904528843324f3ea49ff05e530e2


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself human activity check Windows ComputerName 		2 8.0 M 29 ZeroCERT

11576 2021-08-20 10:08 photo.png  

042d6a2c08376d3cb1860a74383a5e58


Emotet Gen1 UPX Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check DLL PE32 Dridex TrickBot VirusTotal Malware Report suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		23 13 5 10.8 M 12 ZeroCERT

11577 2021-08-20 10:09 @anzLZT.exe  

5fbdb67d70370031243a318db2299252


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check .NET EXE PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		3 5 3 1 7.2 M 33 ZeroCERT

11578 2021-08-20 11:38 skin.exe  

35d246695f2bca9c07c187a2b41ca7e3


Admin Tool (Sysinternals etc ...) UPX Malicious Library ASPack PE File OS Processor Check PE32 VirusTotal Malware PDB 		1.4 M 24 guest

11579 2021-08-20 11:43 skin.exe  

35d246695f2bca9c07c187a2b41ca7e3


Admin Tool (Sysinternals etc ...) Malicious Library ASPack PE File OS Processor Check PE32 VirusTotal Malware PDB 		1.4 M 24 r0d

11580 2021-08-20 16:15 .dllhost.exe  

2d7c454c7dc1b5a3222cb313e46cb031


Loki PWS Loki[b] Loki.m Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 1 12.6 M 18 guest

keyword