popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11971 2021-09-02 09:19 myformzx.exe  

caee75efc8bd1904d750d941d6a760b8


RAT PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 25 ZeroCERT

11972 2021-09-02 09:20 vbc.exe  

a9a4ef232a3238c20d7e392ca286c265


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		10 20 1 1 8.0 M 34 ZeroCERT

11973 2021-09-02 09:21 nnlt4.exe  

d1ce5b7ddf8d49a2554281ffe4e14270


AgentTesla(IN) RAT Generic Malware Malicious Library Malicious Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		5.8 50 ZeroCERT

11974 2021-09-02 09:22 vbc.exe  

ceed79fe40c1038ca78784cc26a1eed5


RAT Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 1 10.2 M 18 ZeroCERT

11975 2021-09-02 09:23 mazx.exe  

2aee5ea79b9327ec85da89421b92d219


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		1 3 1 8.2 22 ZeroCERT

11976 2021-09-02 09:24 odinakazx.exe  

5d7a426f8569371c2bdfc6f005bfe951


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7 15 1 2 8.2 M 22 ZeroCERT

11977 2021-09-02 09:26 bankzx.exe  

6a6119c0de7a594dc63fd62153812a39


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 4 2 9.2 M 28 ZeroCERT

11978 2021-09-02 09:26 vbc.exe  

91b3a89d2c0a881737df49fac38744e4


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		8 14 2 9.2 M 38 ZeroCERT

11979 2021-09-02 09:28 vbc.exe  

d32b55acf96361e5c9c8da94c1b8a102


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8 16 1 8.4 M 36 ZeroCERT

11980 2021-09-02 09:30 obinnazx.exe  

928f82822d997033b331fa2e51e5f6dd


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 4 1 9.2 M 25 ZeroCERT

11981 2021-09-02 09:43 readytans.png  

539614a94256046c940b95493fedb6ec


Malicious Library PE File OS Processor Check DLL PE32 Dridex TrickBot Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 2 2 5.6 ZeroCERT

11982 2021-09-02 09:44 XNO.exe  

36909bb88f91e69d271e206ab3fa8f00


Generic Malware UPX DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Malware download Remcos NetWireRC VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory RWX flags setting unpack itself Windows utilities WriteConsoleW anti-virtualization Windows RAT DNS DDNS keylogger 		1 3 3 8.0 M 36 ZeroCERT

11983 2021-09-02 10:10 udptest.exe  

0f7b6037afdc508b17dd99eb1610ef49


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		1.8 M 21 ZeroCERT

11984 2021-09-02 10:10 hkd.exe  

e1bdba8cd7ae8d8f3fe039b5ee58b88d


Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 13.4 M 19 ZeroCERT

11985 2021-09-02 10:13 C0LiTuZTZQvREpr.exe  

f805e0d740cfd22eefcdbfccb2ba7d2b


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 11.2 M 40 ZeroCERT

keyword