popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11596 2021-08-20 17:36 n33.exe  

d1ce5b7ddf8d49a2554281ffe4e14270


AgentTesla(IN) RAT Generic Malware Malicious Library Malicious Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		5.8 41 ZeroCERT

11597 2021-08-20 17:36 wdqdwq.dll  

93d00a52720b98570ad54a8ae5c2411a


RAT Generic Malware Malicious Packer PE File .NET DLL DLL PE32 VirusTotal Malware 		0.6 16 ZeroCERT

11598 2021-08-21 04:18 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk suspicious TLD WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		2 4 3 13.0 guest

11599 2021-08-21 04:26 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		4 4 3 12.6 guest

11600 2021-08-21 04:28 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		4 4 3 12.2 guest

11601 2021-08-21 04:29 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		3 4 3 11.4 guest

11602 2021-08-21 04:32 BloxCrusher.exe  

6cb860d4ba58d8c248ca0a749bca63f4


RAT Generic Malware Malicious Packer Antivirus PE File PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 4 1 9.4 46 guest

11603 2021-08-21 04:48 executor.exe  

f9599f29d02ff110f5145a0140927c58


RAT BitCoin Generic Malware Malicious Packer AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 11.0 guest

11604 2021-08-21 04:54 FAKE BTC SENDER zip.exe  

3a7da416e0ed02e02fa874f3ae09e9a2


RAT PWS .NET framework Formbook North Korea Generic Malware WinRAR Malicious Library Malicious Packer PE File OS Processor Check PE32 .NET DLL DLL .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		2 3 2 10.2 29 guest

11605 2021-08-21 07:09 secur.exe  

697eb5426e9006fac2ae1354277991f1


RAT Generic Malware Malicious Packer PE File OS Processor Check .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces AntiVM_Disk IP Check VM Disk Size Check Tofsee Windows ComputerName keylogger 		3 4 3 7.4 33 guest

11606 2021-08-21 08:47 International Crimean Platform...  

a35fcbf7ef40676341460277bdba9926

VirusTotal Malware MachineGuid Check memory RWX flags setting unpack itself AntiVM_Disk VM Disk Size Check Tofsee GameoverP2P Zeus ComputerName Trojan Banking 		2 2 4.8 3 ZeroCERT

11607 2021-08-21 08:52 QuickAssist.exe  

8b7048c86ae28962e664fd49c4d13d12


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows Cryptographic key 		1.8 28 ZeroCERT

11608 2021-08-21 08:53 htown.exe  

6452a476398bc73e815078a0342425f6


Ave Maria WARZONE RAT NPKI Malicious Library Malicious Packer PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware MachineGuid Code Injection Check memory buffers extracted WMI unpack itself suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Browser Email ComputerName Remote Code Execution crashed 		2 8.2 59 ZeroCERT

11609 2021-08-21 08:55 c.exe  

c8557268007f20f9ed1f206b85d30a99


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.6 M 26 ZeroCERT

11610 2021-08-21 08:56 moses.exe  

898d523f4a9d9fffd9333d49654803c6


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		14 17 2 4.6 M 50 ZeroCERT

keyword