popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11626 2021-08-21 09:17 file3.exe  

20e9069cee1f45478ad701e6591959c3


RAT PWS .NET framework BitCoin Generic Malware SMTP AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Cryptographic key crashed 		2 4 2 9.8 M ZeroCERT

11627 2021-08-21 09:18 Android_Guncelleme.apk  

3f44e53892fe1ea4abb5eb537ca347f7


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		4.2 M 8 ZeroCERT

11628 2021-08-21 09:19 msedge_web.exe  

7c6e0622a03d8f1d062757882987dd2d


RAT Generic Malware Antivirus Malicious Packer PE File PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.6 M 28 ZeroCERT

11629 2021-08-21 09:20 file6.exe  

446637e3ae69f3bc221b8be9c410f3b5


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 1 7.2 M 38 ZeroCERT

11630 2021-08-21 09:21 msedge.exe  

9fa656e46f3e5936261d1c9ea1b4952f


RAT Generic Malware Malicious Packer Antivirus PE File PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.0 M 26 ZeroCERT

11631 2021-08-21 09:26 @TrippieLZT.exe  

b0cdc459012aae2a5210da376f5df3e0


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		3 5 3 2 7.4 M 40 ZeroCERT

11632 2021-08-21 12:16 simple.png  

4fb0ee16540b1779fce8c502e6d877dc


Emotet Gen1 Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check DLL PE32 Dridex TrickBot VirusTotal Malware Report suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Kovter ComputerName DNS crashed 		18 13 5 11.0 7 ZeroCERT

11633 2021-08-21 12:17 mac.dotm  

d9b583dae1c7d4bdef40a58e084651f8


VBA_macro VirusTotal Malware unpack itself 		1.8 18 ZeroCERT

11634 2021-08-21 12:26 2021.xls  

56675c71fc4d24043b4e985a8b08110a


MSOffice File VirusTotal Malware RWX flags setting unpack itself 		1.4 16 guest

11635 2021-08-21 12:57 Mango.exe  

743ba3d2c39e49ea72a76d58f60e9532


RAT PWS .NET framework BitCoin Generic Malware Antivirus HTTP Internet API Http API Downloader SMTP AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		5 9 2 16.0 28 ZeroCERT

11636 2021-08-21 12:57 bildak.exe  

74462c471a8c9dffed8b89f945c95175


PWS Loki[b] Loki.m AgentTesla RAT .NET framework Gen1 browser info stealer Generic Malware Malicious Library Malicious Packer SMTP ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check DLL JPEG Format Browser Info Stealer Malware download FTP Client Info Stealer Vidar Arkei VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee ArkeiStealer OskiStealer Stealer Windows Browser Email ComputerName DNS Cryptographic key Software Password 		9 3 6 16.4 24 ZeroCERT

11637 2021-08-21 12:58 maijn.exe  

61da94be84700b3011e522e60a3c2c0b


RAT PWS .NET framework Generic Malware SMTP HTTP Internet API Http API Downloader AntiDebug AntiVM PE File .NET EXE PE32 GIF Format VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Windows Browser Cryptographic key 		2 4 2 10.0 27 ZeroCERT

11638 2021-08-23 10:01 ffff.exe  

d35e7ff5f6287ff8b7fcf92ea41bf684


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		4.2 M 15 ZeroCERT

11639 2021-08-23 10:08 b0e4f7e89442b09ac387d141968818...  

f206ba06dfdef9c5233fcf2a85a0732a


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware Check memory crashed 		1.8 M 40 ZeroCERT

11640 2021-08-23 10:09 5Yt9sCiDJCsigNC.exe  

5e02008227eca0fcf1fe8aeeb4c98e19


RAT PWS .NET framework Generic Malware HTTP Internet API Http API Downloader AntiDebug AntiVM PE File .NET EXE PE32 GIF Format VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Tofsee Windows Browser Cryptographic key 		2 4 2 11.4 M 24 ZeroCERT

keyword