popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11911 2023-06-28 07:56 Nano.exe  

01beaefb0f56383b0c2906619fc03f19


Confuser .NET DNS AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		3 1 13.6 M 52 ZeroCERT

11912 2023-06-28 07:54 R.exe  

5ba4bab377c6656e50a48cd48bd84c59


Formbook Confuser .NET AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		10 11 6 9 9.2 M 52 ZeroCERT

11913 2023-06-28 07:51 grace.exe  

ef4980e4520551d402c1723432a424ea


Generic Malware Confuser .NET DNS AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		3 1 12.8 M 53 ZeroCERT

11914 2023-06-28 07:49 mo.exe  

8ef917494a0e51cc61e491173b16150d


UltraVNC UPX Malicious Library DNS AntiDebug AntiVM OS Processor Check PE32 PE File VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		4 2 14.8 M 54 ZeroCERT

11915 2023-06-28 07:48 btt.exe  

e052e7de9592d69a07411a1d2bb182b6


UltraVNC UPX Malicious Library DNS AntiDebug AntiVM OS Processor Check PE32 PE File VirusTotal Malware Buffer PE PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS Cryptographic key DDNS crashed 		4 1 12.6 M 55 ZeroCERT

11916 2023-06-28 07:47 SY.exe  

e7a2ab8911263403853a67fce20941e7


.NET EXE PE32 PE File VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger unpack itself DNS 		1 6.2 M 54 ZeroCERT

11917 2023-06-28 07:45 next.exe  

253e1a1c0adc27865a30a66de4b55b45


Generic Malware Confuser .NET DNS AntiDebug AntiVM PE64 PE File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		4 1 12.2 M 49 ZeroCERT

11918 2023-06-28 07:45 vik.exe  

5f859ce795a09f858adc51815cc0faf8


Generic Malware task schedule Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM .NET EXE PE32 PE File Malware download AsyncRAT NetWireRC VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 2 13.2 M 45 ZeroCERT

11919 2023-06-28 07:40 Dollar.exe  

75c279006f649b36303f4167f5617c53


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Downloader Google Chrome User Data Confuser .NET Create Service Socket Escalate priviledges PWS Sniff Audio DNS ScreenShot Internet API KeyLogger AntiDebug AntiVM PE64 PE File Browser Info Stealer Remcos VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser DNS keylogger 		1 1 9.2 M 52 ZeroCERT

11920 2023-06-28 07:37 AR.exe  

1ba7ea81ce6384aa8ce61f8295c5822a


Confuser .NET PWS SMTP KeyLogger AntiDebug AntiVM PE64 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 3 12.4 M 53 ZeroCERT

11921 2023-06-28 07:36 Adobe.ClientSetup.exe  

d70cc583716119d01c718d49c5bd6af9


njRAT backdoor Generic Malware UPX Malicious Library Antivirus OS Name Check OS Processor Check CAB PE32 MSOffice File PE File DLL VirusTotal Malware PDB suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows ComputerName Remote Code Execution Cryptographic key crashed 		2 5.0 15 ZeroCERT

11922 2023-06-28 07:35 HH.exe  

859f5ba01acb6e8183db471ce9dd1ba9


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Downloader Google Chrome User Data Confuser .NET Create Service Socket Escalate priviledges PWS Sniff Audio DNS ScreenShot Internet API KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself DNS DDNS 		2 2 9.0 M 51 ZeroCERT

11923 2023-06-28 07:34 D.exe  

62768c1c66df7acd5ce554069ea6a205


Formbook Confuser .NET AntiDebug AntiVM PE64 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		19 19 6 18 9.0 M 49 ZeroCERT

11924 2023-06-28 07:33 ARR.exe  

295830947cfc8aa0980ddb245c526843


Confuser .NET PWS SMTP KeyLogger AntiDebug AntiVM PE64 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 3 12.4 M 52 ZeroCERT

11925 2023-06-28 07:31 H2.exe  

2b262120999e89d0fae7cacf763301a6


Client SW User Data Stealer Backdoor RemcosRAT browser info stealer Downloader Google Chrome User Data Confuser .NET Create Service Socket Escalate priviledges PWS Sniff Audio DNS ScreenShot Internet API KeyLogger AntiDebug AntiVM PE64 PE File VirusTotal Malware AutoRuns PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself WriteConsoleW Windows 		8.2 M 48 ZeroCERT

keyword