popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11761 2021-08-25 09:14 CD.exe  

ae03778cf368977eea85419acfc768d9


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 6.8 M ZeroCERT

11762 2021-08-25 09:15 1.exe  

a1e0aa315c2caf13f0f7edacea3e9aea


RAT Generic Malware Malicious Library Antivirus Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE6 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 4 10.4 M 42 ZeroCERT

11763 2021-08-25 09:16 vbc.exe  

5ba5c0d5ca760b500600849aad55ffec


PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 5 1 7.8 M ZeroCERT

11764 2021-08-25 09:16 can.exe  

941ffbcc54a5826dde6e2d35f2fc761d


PE File PE32 VirusTotal Malware WMI RWX flags setting unpack itself ComputerName crashed 		3.2 M 19 ZeroCERT

11765 2021-08-25 09:18 nbfile.exe  

c75ba05218d933731e55edf937460b86


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 M 21 ZeroCERT

11766 2021-08-25 09:19 fdseventeenzx.exe  

19240f4b0efd2c8ed2f7fcc0835fad17


Loki PWS Loki[b] Loki.m RAT Generic Malware Admin Tool (Sysinternals etc ...) Anti_VM DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 1 13.4 M 32 ZeroCERT

11767 2021-08-25 09:21 v2.exe  

b42512d71c3f14e98719d6036148f8f9


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 8.8 M 33 ZeroCERT

11768 2021-08-25 09:21 vbc.exe  

88edb353bbf9259f0e5eb0830df37086


RAT Generic Malware Admin Tool (Sysinternals etc ...) Anti_VM AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		2 8 1 12.4 M 16 ZeroCERT

11769 2021-08-25 09:23 1.exe  

8ed30c6c10b4ce0567bd443935666e7b


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 7.8 M 33 ZeroCERT

11770 2021-08-25 09:23 arasholit.exe  

353ad3cb7e6b9237e7e7bb96e2b0e5a4


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 7.8 M 33 ZeroCERT

11771 2021-08-25 09:58 can.exe  

941ffbcc54a5826dde6e2d35f2fc761d


Generic Malware PE File PE32 VirusTotal Malware WMI RWX flags setting unpack itself ComputerName crashed 		3.2 M 19 r0d

11772 2021-08-25 10:01 vbc.exe  

5ba5c0d5ca760b500600849aad55ffec


Generic Malware PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 5 1 8.2 M 26 r0d

11773 2021-08-25 10:09 lv.exe  

f1b4d4902447ce5caab448a1ceea1279


Gen1 Gen2 Themida Packer Generic Malware Malicious Library Malicious Packer PE File PE32 GIF Format DLL OS Processor Check VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VMWare AppData folder AntiVM_Disk VMware anti-virtualization VM Disk Size Check human activity check Windows ComputerName Firmware crashed 		1 9.4 M 32 ZeroCERT

11774 2021-08-25 10:09 vbc.exe  

d48fbec5c6a2edf4893023951dd6c021


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		6 17 2 11.4 ZeroCERT

11775 2021-08-25 10:11 file.exe  

03903dd6bc470a44ed1cb27e4e965854


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 M 27 ZeroCERT

keyword