popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11671 2021-08-23 12:43 steammaa.dll  

a1a454066b561968825cf19ca262b2fc


RAT Generic Malware Malicious Packer PE File .NET DLL DLL PE32 VirusTotal Malware PDB 		0.6 5 ZeroCERT

11672 2021-08-23 12:50 AudioMD.exe  

04a571f97551cafab9847b1211c250b2


RAT Generic Malware Antivirus HTTP Internet API Http API Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process sandbox evasion WriteConsoleW Tofsee Windows Browser ComputerName Cryptographic key 		2 4 2 12.6 30 ZeroCERT

11673 2021-08-23 13:30 faveSQTg6lvyAQO.exe  

fd496a2b10e16382abba374c4ce2fc4d


Plimrost EnigmaProtector PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Checks debugger Creates executable files unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName crashed 		6.4 M 39 r0d

11674 2021-08-23 15:55 微信图片_20181017153614.exe  

330d84024809897bd0e60a4b4a4fd1fc


Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.4 21 ZeroCERT

11675 2021-08-23 16:07 45-8801B 예천양수발전 제작 및 납품 설치공사 견...  

94a20af025fdd40b139844c3c61a0580


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		4.2 6 Kim.GS

11676 2021-08-23 16:28 SAMSUNG Golar gFLNG FEED Updat...  

ddd570573ab5711d161bcbde884f3028


Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		3 6 1 9.8 26 Kim.GS

11677 2021-08-23 16:39 PO623473258-50465043274032859-...  

59faa740c9efe54f967745118e4bc625


UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Remote Code Execution 		2.2 26 Kim.GS

11678 2021-08-23 16:54 PO623473258-50465043274032859-...  

59faa740c9efe54f967745118e4bc625


Generic Malware UPX Malicious Packer PE File PE32 VirusTotal Malware RWX flags setting unpack itself Remote Code Execution 		2.2 26 r0d

11679 2021-08-23 18:54 Fattura_01557972.xls  

5f25557c3a67cc816c456e44f9a89bbe


VBA_macro KeyLogger ScreenShot AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection unpack itself 		2.4 3 ZeroCERT

11680 2021-08-23 18:58 taxve_710451_20210816_93407095...  

9a812ebcc070d2a63465ebb416ba8b95

VirusTotal Malware Check memory ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		5 6 2 4.8 M 27 ZeroCERT

11681 2021-08-23 19:01 Pk52FX0q62R4XoO.dll  

f0242add3e62b4bda6a1f3e38e98a73d


Malicious Library Malicious Packer PE File DLL PE32 VirusTotal Malware unpack itself Windows crashed 		2.6 39 ZeroCERT

11682 2021-08-23 19:09 r.exe  

305c02b6842f5b81a6fa7a2aab07b00e


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic ICMP traffic unpack itself 		13 26 1 4.0 42 ZeroCERT

11683 2021-08-23 19:14 kl8.exe  

505468e6735f6b0bf0d37a937eb2d155


Generic Malware Themida Packer Anti_VM PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 7.8 M 40 ZeroCERT

11684 2021-08-23 19:14 sefile2.exe  

f403b3a7bba12aa247e7195e8bb9afe5


UPX Malicious Library PE File OS Processor Check PE32 PDB unpack itself 		1.0 M ZeroCERT

11685 2021-08-23 19:18 dd.exe  

7c207438745687fd62777e3b18535020


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces AppData folder Tofsee Windows DNS Cryptographic key crashed 		13 18 4 6 14.6 M 20 ZeroCERT

keyword