popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11941 2021-09-01 09:26 D1ztFQ.exe  

2403d45817a791f882e157fa75bf2d5c


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.4 13 ZeroCERT

11942 2021-09-01 09:34 win101.exe  

801affd34ae1974fd0965e7c1128eb96


Generic Malware Admin Tool (Sysinternals etc ...) ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		1 3 1 9.4 M 40 ZeroCERT

11943 2021-09-01 09:34 foxmail.exe  

a2f0a07f9490f1f79e845525246e6250


PWS .NET framework email stealer Generic Malware DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key crashed 		1 11.8 M 32 ZeroCERT

11944 2021-09-01 09:36 vbc.exe  

3b0b40fc6119f8ac909a86a6522e8e4a


Generic Malware AutoIt UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee 		1 2 2 2.4 M 28 ZeroCERT

11945 2021-09-01 09:37 Glary_Utilities.exe  

61ed372e749496ecbb31e17bc90a0422


Raccoon Stealer Gen1 BitCoin Generic Malware WinRAR Malicious Library UPX ASPack AntiDebug AntiVM PE File OS Processor Check PE32 DLL VirusTotal Malware Buffer PE PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Check virtual network interfaces AppData folder Windows Remote Code Execution Cryptographic key crashed 		1 2 9.8 M 34 ZeroCERT

11946 2021-09-01 09:39 system32.exe  

a5c58ba5c48f9cb8ab45cd5847a8cb08


RAT PWS .NET framework Generic Malware HTTP Internet API Http API Downloader AntiDebug AntiVM PE File .NET EXE PE32 GIF Format VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Tofsee Windows Browser Cryptographic key crashed 		2 4 2 11.8 M 25 ZeroCERT

11947 2021-09-01 09:39 vbc.exe  

87c51ca97825602b25752753161f6ab4


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 5 1 10.0 M 18 ZeroCERT

11948 2021-09-01 09:41 binbobbyzx.exe  

63b4bbbb2c1b18487c673abcfcff9fff


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3 6 1 8.0 M 32 ZeroCERT

11949 2021-09-01 09:43 rozezx.exe  

d9167b13f4f747f5e9b18a6688a7064e


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 5 13.0 M 31 ZeroCERT

11950 2021-09-01 09:46 DOGGY.exe  

acbc7c1dedc73fdd72ccbaaca2318430


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows ComputerName Cryptographic key crashed 		2 4 10.2 M 26 ZeroCERT

11951 2021-09-01 09:47 pattern.exe  

dcef208fcdac3345c6899a478d16980f


Emotet NPKI Gen2 Gen1 Formbook Generic Malware Malicious Packer Admin Tool (Sysinternals etc ...) Malicious Library Anti_VM ASPack PE File PE32 MSOffice File JPEG Format OS Processor Check DLL PNG Format Emotet VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Checks debugger WMI Creates executable files ICMP traffic unpack itself Windows utilities suspicious process WriteConsoleW shadowcopy delete Turn off Windows Error Recovery notification window IP Check Tofsee Ransomware Windows ComputerName crashed 		4 5 2 14.6 M 31 ZeroCERT

11952 2021-09-01 09:47 kelvinzx.exe  

bb1daddaf3592e05e82b0ab73e7ecd11


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 7.0 M 23 ZeroCERT

11953 2021-09-01 09:50 vbc.exe  

04179ebbab706ca5b7d7eda0becd3abc


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		8 20 1 2 8.4 M 26 ZeroCERT

11954 2021-09-01 10:00 JKd.txt.ps1  

72b9eedf6b1effb1f41c3ee79e89eb98


Generic Malware Antivirus Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.0 M ZeroCERT

11955 2021-09-01 10:01 StaticArrayInitTypeSize52.exe  

69b982b35f003dc6e9ca1e4b5ace2274


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 5 12.6 28 ZeroCERT

keyword