popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11611 2021-08-21 08:57 file2.exe  

fb93137981cf5ba08d4ba71cc4062d6b


RAT PWS .NET framework BitCoin Generic Malware SMTP AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		2 3 1 11.8 M 29 ZeroCERT

11612 2021-08-21 09:01 eli.exe  

70ded05d874a95b1b3027c1e97b16287


Gen1 Gen2 Malicious Library Malicious Packer UPX PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware MachineGuid Malicious Traffic Check memory Creates executable files Collect installed applications AppData folder sandbox evasion anti-virtualization installed browsers check Browser Email ComputerName DNS Software 		1 1 2 9.2 M 58 ZeroCERT

11613 2021-08-21 09:01 StoreTransaction.exe  

f9b9717cc21b3faf2d7387ae6d2c0958


RAT PWS .NET framework Generic Malware Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 27 ZeroCERT

11614 2021-08-21 09:02 file1.exe  

fb05824f223c928ba39e91fe17364438


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		2 3 1 1 6.8 M 45 ZeroCERT

11615 2021-08-21 09:04 mo.exe  

c19e67355e7333e2d68b904fdcfdceec


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName DNS 		2 3 5 1 4.2 M 17 ZeroCERT

11616 2021-08-21 09:04 bin.exe  

14035831d9b086963a7ab5d7fef18c6a


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7 17 3 4 10.6 M 34 ZeroCERT

11617 2021-08-21 09:06 NOTEPAD.exe  

0ede6eb3469ccbe97c5cc2a4fc1114a9


Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key 		3.0 M 29 ZeroCERT

11618 2021-08-21 09:06 file4.exe  

1cb884ef5dc76a942f06f07fe147b31d


RAT PWS .NET framework BitCoin Generic Malware SMTP AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 1 1 7.8 M 30 ZeroCERT

11619 2021-08-21 09:08 js.exe  

1429db94406815eaa9cf34236f480f4a


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName DNS 		2 3 5 1 4.2 M 14 ZeroCERT

11620 2021-08-21 09:08 11.exe  

be4ede5e88f7c98f1c00147019da42ac


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS 		1 3 1 4.0 M 37 ZeroCERT

11621 2021-08-21 09:10 rut.exe  

caf24d1c2944cc10b27a8216aa8a4d4e


RAT Generic Malware PE File .NET EXE PE32 Malware download VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName DNS Downloader 		2 3 6 1 4.2 M 17 ZeroCERT

11622 2021-08-21 09:10 TF7vGJml6S1lQxR.exe  

f108b8fcf5fa07d914b587c85b19b38b


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key 		3.0 M 26 ZeroCERT

11623 2021-08-21 09:15 justin.exe  

6d7edf1f66a4d43e76d1e47f400f97d0


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		3 8 1 1 3.2 M 49 ZeroCERT

11624 2021-08-21 09:15 file5.exe  

08b62c5bcbf205a2784ee149188e4f4b


Generic Malware Themida Packer Anti_VM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		2 3 2 1 10.0 M 26 ZeroCERT

11625 2021-08-21 09:16 lv.exe  

ccfc289366f06bf59611aecaba901d50


Emotet Gen1 Gen2 Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug Anti VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 6.6 M 40 ZeroCERT

keyword