popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11581 2021-08-20 17:10 vbc.exe  

16893b49702338aaa8c043450d0f15f1


PWS .NET framework Generic Malware AntiDebug AntiVM PE File OS Processor Check .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3 6 1 1 8.4 M 33 ZeroCERT

11582 2021-08-20 17:11 vbc.exe  

aa5894726fb68afeb60be8129b4930f7


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		9 18 2 8.4 M 32 ZeroCERT

11583 2021-08-20 17:12 file.exe  

0032903fbb10502ab650e9f0a489929e


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 34 ZeroCERT

11584 2021-08-20 17:12 sefile.exe  

adb3434ca0e21949f5bb6e50edcc974d


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 35 ZeroCERT

11585 2021-08-20 17:14 lv.exe  

23d39eb713a310071bdfe9d05ae62a90


Emotet Gen1 Gen2 Malicious Library Malicious Packer PE File PE32 DLL VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 5.4 M 26 ZeroCERT

11586 2021-08-20 17:14 DllDhcpreviewsessioncrt.exe  

cb7eb1adf0a8dfe4dd7f13840f612514


RAT Generic Malware Malicious Packer PE File OS Processor Check .NET EXE PE32 Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces AntiVM_Disk VM Disk Size Check Windows ComputerName DNS crashed 		2 1 5.8 M ZeroCERT

11587 2021-08-20 17:16 vbc.exe  

2b5346dcfa4f86d3ef68060c22e5a087


Malicious Library PE File OS Processor Check PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 5 9.0 M 30 ZeroCERT

11588 2021-08-20 17:16 index.php  

ea3fca6fc5d1a1a9fe5098996cd215e6


Malicious Library PE File PE32 PDB unpack itself Remote Code Execution 		1.2 ZeroCERT

11589 2021-08-20 17:19 Soft-win64.exe  

087888c1b56195cbd6badd3876767a35


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 30 ZeroCERT

11590 2021-08-20 17:19 kl5.exe  

3eda59632a67aa35beb3417be7547010


Generic Malware Themida Packer Anti_VM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		2 3 1 1 9.2 M 30 ZeroCERT

11591 2021-08-20 17:20 SuccourHippings_2021-08-20_01-...  

42fdf557c2eaed4cde25c9bd9e0f9421


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 36 ZeroCERT

11592 2021-08-20 17:23 Finest_.exe  

bb2e98e725fd42de35f1e68c3f154f24


PWS .NET framework BitCoin Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 12.2 M 37 ZeroCERT

11593 2021-08-20 17:26 lv.exe  

ea6726790536078f1519a965c44a11e8


NPKI Gen1 Emotet Gen2 Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 6.2 M 27 ZeroCERT

11594 2021-08-20 17:33 PACKINGS & TEXTILES.pdf  

a5985fe6a940ee5c5f41639a967deb15


PDF VirusTotal Malware Windows utilities Windows 		5 1.8 1 ZeroCERT

11595 2021-08-20 17:35 tonight.exe  

329debbda9174757ac0678b3cb364e19


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW Tofsee ComputerName 		2 2 1 3.4 22 ZeroCERT

keyword