popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12076 2021-09-04 14:08 vbc.exe  

c13976b4653ada57f5b39e16a793e99f


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed 		9 18 1 8.2 36 ZeroCERT

12077 2021-09-04 14:09 PBrowFile16.exe  

915fff94ba8a7588af46c1090b7cd6d9


NPKI Generic Malware PE File .NET EXE PE32 VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee 		2 5 1 4.4 M 46 ZeroCERT

12078 2021-09-04 14:09 PBrowFile17.exe  

8e2c6bd0f789c514be09799fa453f9bb


Generic Malware PE File .NET EXE PE32 VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee 		2 5 1 2 4.4 M 47 ZeroCERT

12079 2021-09-04 14:11 vbc.exe  

e2e2b1bd1df8d460c9b1d11097429d16


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 48 ZeroCERT

12080 2021-09-04 14:12 beacon.exe  

8d8d168e25d41e2d4304c08cb3105d9b


Malicious Library PE File PE32 Dridex TrickBot VirusTotal Malware RWX flags setting unpack itself Kovter ComputerName Remote Code Execution DNS 		1 3 3.2 M 57 ZeroCERT

12081 2021-09-04 14:14 audio.exe  

40641703573ab3ccb1fafcb7f996b06a


PWS .NET framework email stealer Generic Malware DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key crashed 		1 11.8 M 37 ZeroCERT

12082 2021-09-04 14:16 ibefrankzx.exe  

9deb8fec62787f6a330618dfcb84d818


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		3 6 1 8.2 M 19 ZeroCERT

12083 2021-09-04 14:18 chrome.exe  

30b21677cf7a267da2ef6daff813d054


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.6 M 51 ZeroCERT

12084 2021-09-04 14:21 new.exe  

396e48ab8ea9e0d607ff13b16cf5477d


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces AppData folder Tofsee Windows Cryptographic key 		1 4 2 11.0 M 25 ZeroCERT

12085 2021-09-04 15:18 Zenare.exe  

d43db563bc6efb1c6cbb86f4d21349d9


Emotet Generic Malware Malicious Library PE File PE32 GIF Format VirusTotal Malware AutoRuns Creates shortcut Creates executable files RWX flags setting unpack itself AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Tofsee Windows Browser 		2 4 2 5.6 10 ZeroCERT

12086 2021-09-04 15:25 Security Bugs in Operation.pdf...  

02904e802b5dc2f85eec83e3c1948374


Generic Malware Anti_VM DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM GIF Format VirusTotal Malware Code Injection Check memory Creates shortcut RWX flags setting unpack itself suspicious process malicious URLs Tofsee Interception 		1 2 1 5.0 20 ZeroCERT

12087 2021-09-04 15:29 Security Bugs in Operation.pdf  

887b611a15102af0238a4084c22be025


Anti_VM PDF Windows utilities Windows 		5 1.4 ZeroCERT

12088 2021-09-05 08:54 2GBzRuGCFtarHn8.exe  

9982c2f68fbebf8f9c5fb2c0fd711164


Generic Malware Antivirus DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		2 1 15.2 37 ZeroCERT

12089 2021-09-05 08:57 taos.exe  

1d11bcec0aff60ec16a81131e2a4d7c3


Generic Malware Malicious Library AntiDebug AntiVM PE File PE32 JPEG Format Malware download Amadey VirusTotal Malware AutoRuns Code Injection Malicious Traffic Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		3 2 6 2 9.2 M 24 ZeroCERT

12090 2021-09-05 08:59 vbc.exe  

cd6fb772e30b73bae310c242e03bf8ba


Malicious Library DNS Escalate priviledges ScreenShot AntiDebug AntiVM PE File PE32 GIF Format DLL Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName 		2 1 13.2 15 ZeroCERT

keyword