popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11911 2021-08-31 11:12 b3A6h.exe  

bc867757658b294a9d7fbfd2d967e477


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		1 9.2 M 21 ZeroCERT

11912 2021-08-31 11:12 vbc.exe  

aca08c69a22e6f4f07cb44a74e7b9dac


Malicious Library PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Tofsee 		29 27 2 6 6.6 M 26 ZeroCERT

11913 2021-08-31 11:12 vbc.exe  

aa17e1f1f3f2b6b46064b5f425b5a12d


RAT Generic Malware Antivirus Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 GIF Format Malware download VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder Tofsee Windows ComputerName DNS Cryptographic key crashed Downloader 		1 5 6 10.0 M 27 ZeroCERT

11914 2021-08-31 11:14 osamazx.exe  

a17a64737d92abc4c83b976aaaad4f36


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.6 M 20 ZeroCERT

11915 2021-08-31 11:16 vbc.exe  

5353b45c9539a13e90412b00cffd5a5a


UPX PE File PE32 VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Tofsee DNS 		1 3 1 3.8 M 20 ZeroCERT

11916 2021-08-31 11:19 mazx.exe  

ef4942c6a1878c114f57ad82ee19de69


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 4 1 7.8 M 27 ZeroCERT

11917 2021-08-31 11:21 plugmanzx.exe  

19dff3b73bcbdc7f040dcc6bb85f26fa


Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		3 2 14.2 M 25 ZeroCERT

11918 2021-08-31 11:34 vbc.exe  

5353b45c9539a13e90412b00cffd5a5a


UPX AutoIt PE File PE32 VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Tofsee 		1 2 1 3.2 M 20 r0d

11919 2021-08-31 12:50 Server.exe  

1d40468835f2dab842cb3dbf4aea5923


Malicious Library PE File OS Processor Check PE32 Malware download VirusTotal Malware Malicious Traffic Check memory Creates executable files RWX flags setting unpack itself sandbox evasion Windows Browser Remote Code Execution DNS 		1 6 6.4 M 58 ZeroCERT

11920 2021-08-31 12:50 11111.exe  

6d99db65a28ca2dcf725a966678ad30e


Malicious Library PE File OS Processor Check PE32 Malware download VirusTotal Malware Malicious Traffic Check memory Creates executable files RWX flags setting unpack itself sandbox evasion Windows Browser Remote Code Execution DNS 		1 6 6.4 M 57 ZeroCERT

11921 2021-08-31 12:52 verb.exe  

46355d768d1028f7b95386d3ea309590


RAT PWS .NET framework Gen2 Generic Malware Malicious Library Malicious Packer PE File .NET EXE PE32 PE64 DLL VirusTotal Malware PDB MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee DNS 		1 3 1 5.6 M 31 ZeroCERT

11922 2021-08-31 12:54 mstsc.exe  

8ffdda74390bca8ecb399d1b37868977


Malicious Library PE File PE32 Malware download Cobalt Strike Cobalt VirusTotal Malware RWX flags setting unpack itself ComputerName DNS 		1 1 1 3.2 M 49 ZeroCERT

11923 2021-08-31 12:59 Garland.exe  

4ea58f64f2e07a252c21d18d1156c96b


RAT PWS .NET framework Generic Malware SMTP AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted RWX flags setting unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 14.6 M 33 ZeroCERT

11924 2021-08-31 15:28 ORDER-656-2561981-4091274.zip  

76cdb2bad9582d23c1f6f4d868218d6c

 guest

11925 2021-08-31 16:28 Final.txt.ps1  

015873296d262315f2583b1fb4fa6b94


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 9.6 M 9 ZeroCERT

keyword