popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12106 2021-09-06 08:39 7iyjgopen.exe  

b5d53c4dbacaa04350366e05b7222e7f


NPKI Generic Malware UPX Malicious Library Malicious Packer PE File PE64 VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself ComputerName 		3.2 41 ZeroCERT

12107 2021-09-06 08:39 0831_3314378773.doc  

ca29d350e363b21d507ba30cb65413ce


Generic Malware VBA_macro MSOffice File GIF Format VirusTotal Malware Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces suspicious TLD IP Check ComputerName 		4 8 1 9.2 12 ZeroCERT

12108 2021-09-06 08:42 0902_6686864155.doc  

b4095bc22ff3f27dd088852a49338c08


Generic Malware VBA_macro MSOffice File GIF Format VirusTotal Malware Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Check virtual network interfaces suspicious TLD IP Check ComputerName 		4 8 1 10.0 17 ZeroCERT

12109 2021-09-06 12:02 bypass.txt.ps1  

9a5efb3abce6346200b089761fff1688

VirusTotal Malware crashed 		0.6 M 1 ZeroCERT

12110 2021-09-06 12:14 Request for Quote 30-08-2021·p...  

612bb2a0321b426e684e268ed72e9776


UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself anti-virtualization Tofsee Advertising Google Remote Code Execution 		1 2 1 3.4 33 ZeroCERT

12111 2021-09-06 13:39 Request for Quote 30-08-2021·p...  

612bb2a0321b426e684e268ed72e9776


GuLoader UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself anti-virtualization Tofsee Advertising Google Remote Code Execution 		2 1 4.0 M 33 r0d

12112 2021-09-06 14:23 Food Insecurity in DPRK 2021 (...  

d5af4f0d18eb820d379879b1691436c9


PDF 		Kim.GS

12113 2021-09-06 17:46 davidhillzx.exe  

e4774645eabe1266293642b96a2c85ec


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.4 16 ZeroCERT

12114 2021-09-06 18:01 vbc.exe  

3ae5d6fb7cb61a90903606a5f8889960


Generic Malware PE File .NET EXE PE32 Check memory Checks debugger unpack itself Windows Cryptographic key 		1.0 M ZeroCERT

12115 2021-09-06 18:04 vbc.exe  

35ffee4482ae6ca8ce58f107fbb259c3


Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7 9 1 2 8.0 M 18 ZeroCERT

12116 2021-09-06 18:05 kernel.exe  

5eba11fd37f1a4e7fb244675bd88b85c


Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		8 15 1 1 9.4 M 15 ZeroCERT

12117 2021-09-06 18:05 sefile2.exe  

80c223af51fcaa9cd18394d64f08e20e


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 M 29 ZeroCERT

12118 2021-09-06 18:06 ghjk.exe  

be1aaef37143496d75cb83643ff63f8c


PWS Loki[b] Loki.m Raccoon Stealer Gen1 Gen2 Generic Malware UPX Malicious Library Malicious Packer ScreenShot Http API Steal credential DNS Socket KeyLogger HTTP Internet API AntiDebug AntiVM PE File PE32 DLL OS Processor Check JPEG Format Browser Info Stealer Malware download Vidar Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory buffers extracted WMI Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee Ransomware OskiStealer Stealer Windows Browser Email ComputerName DNS crashed Password 		13 6 9 1 19.2 M 48 ZeroCERT

12119 2021-09-06 18:06 rc.exe  

e0fcb3e605e5fffbb4e30deed0af01cb


Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		1 8 1 12.6 M 45 ZeroCERT

12120 2021-09-06 18:08 Vids.exe  

07d8a630c42701bd47b10d5a15059720


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 M 28 ZeroCERT

keyword