popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11716 2021-08-24 09:29 Microsoft.exe  

0defe1e926b2407ee4a292480d8ebf48


RAT Generic Malware Themida Packer Anti_VM PE File OS Processor Check .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		1 3 1 10.0 M 23 ZeroCERT

11717 2021-08-24 09:29 blessedzx.exe  

a27561650fe74ab80657545858791cd4


AgentTesla browser info stealer Generic Malware Google Chrome User Data Admin Tool (Sysinternals etc ...) Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS keylogger 		1 11.2 M 30 ZeroCERT

11718 2021-08-24 09:31 omass.exe  

ba6c5d53e9418b5ce3c569831b68a0c7


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.0 M 46 ZeroCERT

11719 2021-08-24 09:32 bom-01.exe  

4f9bae274183d2340e7d0cf1d0a37b88


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		14 16 12 8.6 M 25 ZeroCERT

11720 2021-08-24 09:33 musik.exe  

8c02034958ae86a8d8b42fa5545561a7


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		3.0 M 45 ZeroCERT

11721 2021-08-24 09:33 chioma.exe  

e9c5234672c791846a076210769b9c87


Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		5.2 M 22 ZeroCERT

11722 2021-08-24 09:35 bom.exe  

7151706b714e5711fc0c3a49fb4cf9be


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		5 11 1 4 9.2 M 24 ZeroCERT

11723 2021-08-24 09:39 sefile.exe  

b1c5a3368b6c0c2aa2042560821dbe69


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 M 25 ZeroCERT

11724 2021-08-24 09:41 ob.exe  

95fe547bbaa4db499b9d04bf7843608b


PE File PE32 VirusTotal Malware unpack itself 		1.6 M 21 ZeroCERT

11725 2021-08-24 09:43 bd.exe  

d25769efd533ba3d13a13a3274fe69ab


PE File PE32 VirusTotal Malware unpack itself 		1.6 M 29 ZeroCERT

11726 2021-08-24 09:48 galvanizedzx.exe  

395b7c06e528ce1943e4f10b923acc9e


PWS Loki[b] Loki.m Gen1 Gen2 Generic Malware Malicious Library Malicious Packer UPX DNS Socket KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE File .NET EXE PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Ransomware Zeus Windows Browser Email ComputerName Cryptographic key Software 		1 2 1 15.4 M 25 ZeroCERT

11727 2021-08-24 11:57 211575.xls  

85eec686404e8d636c1d2e115f0a28a2


VBA_macro MSOffice File VirusTotal Malware RWX flags setting unpack itself 		1.2 6 ZeroCERT

11728 2021-08-24 11:58 Explorer.exe  

fd3b4ad42fe49dff3b786e6e949fba83


AntiDebug AntiVM MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 8 2 4.2 ZeroCERT

11729 2021-08-24 12:01 StaticArrayInitTypeSize.exe  

50c7ebc89793bd7c8ba93468efec11dc


PWS Loki[b] Loki.m Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		3 2 6 14.6 31 ZeroCERT

11730 2021-08-24 12:05 DCRAT.exe  

e8317caac6568f4d37d8535a1e56ad29


RAT Generic Malware Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS Processor Check .NET EXE PE3 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS crashed 		2 1 10.2 48 ZeroCERT

keyword