popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11791 2021-08-26 08:33 vbc.exe  

7a2484277599f27801079f9bbda665c1


PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software crashed 		1 2 5 1 8.6 M 40 ZeroCERT

11792 2021-08-26 08:35 Raz.exe  

c518288f75b3d5ee671193c32f88be3c


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces suspicious process WriteConsoleW ComputerName DNS 		11 23 1 12.0 16 ZeroCERT

11793 2021-08-26 08:37 bill.exe  

27ee757d743631d49dcb3c6d7c90dfbe


Admin Tool (Sysinternals etc ...) Malicious Library PE File PE32 Emotet VirusTotal Malware Buffer PE Code Injection buffers extracted RWX flags setting unpack itself Tofsee 		3 4 1 5.6 18 ZeroCERT

11794 2021-08-26 08:38 vbc.exe  

c1e872d6aea9f4c23401047114261837


RAT Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 10.4 29 ZeroCERT

11795 2021-08-26 08:41 heloo.exe  

a803d6ca253630ad1c7d2d23623ce731


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 11.6 M 27 ZeroCERT

11796 2021-08-26 08:42 dock.exe  

ba5199b37d013a27f8b20ae1d19545ab


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.8 M 27 ZeroCERT

11797 2021-08-26 08:44 ppp.exe  

570a3dc73ebd68dab57a9e3212cb0641


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 11.8 M 32 ZeroCERT

11798 2021-08-26 08:45 loader2.exe  

fbae05d8fbfbb56b2a96afabfcaab501


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee 		1 2 2 2.2 15 ZeroCERT

11799 2021-08-26 08:46 vbc.exe  

f34f70137d2f8238d8525b2e6561623f


UPX PE File PE32 Check memory Checks debugger unpack itself Tofsee 		1 2 2 1.6 ZeroCERT

11800 2021-08-26 08:47 loader1.exe  

6cd0a4f10dabb456456d0b7336f13116


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee 		1 2 2 2.4 M 21 ZeroCERT

11801 2021-08-26 08:49 chekwazx.exe  

6d31f5d6aed669946107e845c8037d9f


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Disables Windows Security Checks Bios Detects VirtualBox powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW VMware anti-virtualization IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 4 21.0 M 43 ZeroCERT

11802 2021-08-26 08:49 7501.ps1  

5480fceef4e5290938cb0a23955358df


Generic Malware Antivirus VirusTotal Malware powershell AutoRuns WMI Creates executable files unpack itself Windows ComputerName 		1 2 4.4 3 ZeroCERT

11803 2021-08-26 08:51 ebb.exe  

92d6baf79e990130a1db2175731d4e46


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows Browser ComputerName DNS Cryptographic key DDNS crashed 		8 3 3 10.4 M 25 ZeroCERT

11804 2021-08-26 08:52 razi.exe  

b2a06b4fb1811354110a6ff29195744f


Generic Malware Malicious Library PE File .NET EXE PE32 VirusTotal Malware 		1.0 M 33 ZeroCERT

11805 2021-08-26 09:16 vbc.exe  

7a2484277599f27801079f9bbda665c1


Dimnie PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 5 1 8.6 M 40 r0d

keyword