popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11836 2021-08-27 15:58 vbc.exe  

7c1876b8b71c72e8e9fb2fd494020c67


Generic Malware UPX PE File PE32 VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself Tofsee 		2 2 3.4 M 39 ZeroCERT

11837 2021-08-27 16:01 Ne82jq7vKJ7NcDn.exe  

7852a7b27bdb9d5120ca3fa917d7f9ca


RAT PWS .NET framework Generic Malware PSW Bot LokiBot ZeusBot AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key 		3 2 2 13.8 M 27 ZeroCERT

11838 2021-08-27 16:03 XssVEsUTA4UMkp4.exe  

4adabacc6bf40958b67967c7af0e3491


RAT PWS .NET framework Generic Malware PSW Bot LokiBot ZeusBot AntiDebug AntiVM PE File .NET EXE PE32 Malware download VirusTotal Malware IoC AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key 		3 3 2 14.8 M 19 ZeroCERT

11839 2021-08-27 16:07 Async.exe  

cfd0d3019414ab97ca0501e683121468


RAT PWS .NET framework Generic Malware Malicious Packer Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE Dridex TrickBot VirusTotal Malware AutoRuns Code Injection Windows utilities suspicious process AppData folder WriteConsoleW Kovter Windows ComputerName DNS DDNS 		2 2 5.2 M 45 ZeroCERT

11840 2021-08-27 16:08 vbc.exe  

47fa27443cb1abe987ca9f653754b6d0


Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName DNS 		17 21 3 13.4 M 39 ZeroCERT

11841 2021-08-27 16:10 Hidden.exe  

a49b49fc0253c0dbbbd17e42bfbe9df6


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces IP Check installed browsers check Windows Browser ComputerName DNS DDNS crashed 		1 4 2 11.8 M 28 ZeroCERT

11842 2021-08-27 17:35 .svchost.exe  

2644b63346379dd60b63309ff086eeef


Generic Malware UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Remote Code Execution 		2.0 M 30 r0d

11843 2021-08-28 02:59 bear.jpg.exe  

1d9dcacc61aaacca64e3776e9bb06e94


Generic Malware UPX Antivirus PE File PE32 VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 9.0 M 55 guest

11844 2021-08-28 17:46 bd.exe  

e4c49f9d53f701a8e2edecc9dd8a5057


AntiDebug AntiVM PE File PE32 DLL Browser Info Stealer Malware download VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Stealer Windows Browser Email ComputerName DNS 		2 1 4 11.4 M 39 ZeroCERT

11845 2021-08-28 17:47 vbc.exe  

4793724aa393e35f8cf54797453a25d6


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		9 19 1 8.4 M 35 ZeroCERT

11846 2021-08-28 17:48 44.dll  

6a124d95c5c5038daf38b7d0d8719996


PE File PE64 DLL VirusTotal Malware Check memory unpack itself Windows utilities Windows 		2.0 M 19 ZeroCERT

11847 2021-08-28 17:48 BIN.exe  

d71f491288c6eceb46c92467c83f3758


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		12.2 M 32 ZeroCERT

11848 2021-08-28 17:50 file.exe  

3c112a39d8866d896f68adfa3b78a16a


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 M 23 ZeroCERT

11849 2021-08-28 17:52 PBrowFile17.exe  

84224064f8554bcea55de014d6d8538f


RAT PWS .NET framework Generic Malware PE File .NET EXE PE32 OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		10 11 1 14.2 M 33 ZeroCERT

11850 2021-08-28 17:53 good.exe  

072769a3e8b70e0f24b31278c5f4c897


AntiDebug AntiVM PE File PE32 DLL Browser Info Stealer Malware download VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Stealer Windows Browser Email ComputerName DNS 		2 1 4 10.8 M 30 ZeroCERT

keyword