popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11821 2021-08-27 15:42 build_2021-08-25_11-30.exe  

b27c38cb9a8a55bf5f24051bf8c39e91


UPX Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.4 M 24 ZeroCERT

11822 2021-08-27 15:44 tooltipred.png  

4f907ddbf3e599e3d4f6687dcf69e747


Emotet Malicious Library AntiDebug AntiVM PE File PE32 Dridex TrickBot Malware Report suspicious privilege Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		12 8 5 10.2 ZeroCERT

11823 2021-08-27 15:45 Adobe-GenP-2.7.exe  

6467e9dd5d86c741aed49060e6d3fcd2


Malicious Library PE File PE64 OS Processor Check VirusTotal Malware Report Check memory Checks debugger unpack itself sandbox evasion human activity check DNS 		3 1 3.0 1 ZeroCERT

11824 2021-08-27 15:46 resizebar.png  

b4e0bc4b97c1ff7dc3964293fd10fa5a


Emotet Malicious Library AntiDebug AntiVM PE File PE32 Dridex TrickBot Malware suspicious privilege Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		11 9 4 10.2 ZeroCERT

11825 2021-08-27 15:47 vbc.exe  

97c2aecf2380200fc50b84d72af34480


Generic Malware UPX PE File PE32 VirusTotal Malware Check memory Checks debugger buffers extracted ICMP traffic unpack itself Tofsee DNS 		1 6 1 5.4 M 14 ZeroCERT

11826 2021-08-27 15:48 Sonytec.exe  

9f131b2c9238dec27437d330d4b2b872


RAT Generic Malware Antivirus KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Check virtual network interfaces suspicious process AppData folder sandbox evasion VMware anti-virtualization IP Check installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		5 8 5 25.8 M 11 ZeroCERT

11827 2021-08-27 15:49 Sensys_DSign_FY_2021_2022Setup...  

b919eae6a85535797d58048b45c8df00


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB Check memory RWX flags setting unpack itself Remote Code Execution 		2.2 M 13 ZeroCERT

11828 2021-08-27 15:49 jetbaksaz.dll  

47b7c6480b6f17e7f084584f04cf5440


Generic Malware PE File .NET DLL DLL PE32 VirusTotal Malware PDB 		1.0 M 29 ZeroCERT

11829 2021-08-27 15:50 NvidiaShare1.exe  

814f22a67e6d2046f532f973f197c649


RAT PWS .NET framework Generic Malware DGA DNS Socket Create Service SMTP Sniff Audio Escalate priviledges KeyLogger Code injection Internet API ScreenShot Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself malicious URLs Tofsee BitRAT Windows ComputerName DNS Cryptographic key crashed keylogger 		1 5 2 13.0 M 20 ZeroCERT

11830 2021-08-27 15:51 mixer.exe  

63b84dcd1b3804bcb9daeca03e14bfc6


Generic Malware Themida Packer PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		1 4 1 10.0 M 21 ZeroCERT

11831 2021-08-27 15:52 DC.exe  

eb847438f988c2a2d52bcf0f0b439980


RAT PWS .NET framework Generic Malware Antivirus Malicious Packer Malicious Library PE File OS Processor Check .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 3.6 M 43 ZeroCERT

11832 2021-08-27 15:53 0fd9ce44914b3beda3c86ba2163945...  

6d3d857dce2ce88c250574619f6a2f0a


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.8 M 41 ZeroCERT

11833 2021-08-27 15:54 nputty.exe  

1b726484bea3d11852e96ef2494cce24


Generic Malware Malicious Packer PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted unpack itself human activity check Windows ComputerName DNS DDNS 		4 1 9.0 M 53 ZeroCERT

11834 2021-08-27 15:57 .svchost.exe  

2644b63346379dd60b63309ff086eeef


UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Remote Code Execution 		2.0 M 30 ZeroCERT

11835 2021-08-27 15:57 odinakazx.exe  

8e6f8cd375efaba9d88c2930af3dc10e


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		10 22 2 8.0 M 35 ZeroCERT

keyword