popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12151 2021-09-07 15:03 charles.html  

da1721b1e3a188310ec7e7b2520213c3


Antivirus AntiDebug AntiVM PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		31 16 2 4.2 ZeroCERT

12152 2021-09-07 15:06 blackmatter.exe  

18c7c940bc6a4e778fbdf4a3e28151a8


BlackMatter Ransomware PE File PE32 VirusTotal Malware MachineGuid Check memory unpack itself AntiVM_Disk VM Disk Size Check Ransomware ComputerName 		2 7.6 53 r0d

12153 2021-09-07 15:11 ojbabas.exe  

04980596d66951166fa2ebfd96c84d22


TTiger Keylogger PE File PE32 OS Processor Check VirusTotal Malware unpack itself Tofsee 		1 2 2 1.2 M 26 r0d

12154 2021-09-07 18:57 shattgojas.exe  

3dd433076befeaeb67f2e9aee5207b9a


PE File PE32 VirusTotal Malware Tofsee 		1 2 2 1.0 M 33 ZeroCERT

12155 2021-09-07 18:58 rollerkind2.exe  

69e1794d5d6331000ad3d26f6876432f


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 22 ZeroCERT

12156 2021-09-07 19:00 dan.exe  

aff8123fb844bd75ae95db9dd3dc94ed


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		12.6 M 19 ZeroCERT

12157 2021-09-07 19:00 p5.exe  

150d402c22f8ad26ac0a47cb08ef2b8d


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Browser Email ComputerName Software crashed 		1 2 1 6.6 M 26 ZeroCERT

12158 2021-09-07 19:04 clip.exe  

745b2fa5052c6dd80ae98f7aed56d23a


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 22 ZeroCERT

12159 2021-09-07 19:04 rig.exe  

0b85eae86038116041ecc8d24ba2fadb


Malicious Library UPX Malicious Packer PE File PE64 OS Processor Check VirusTotal Malware unpack itself ComputerName 		2.0 53 ZeroCERT

12160 2021-09-07 19:06 c2.exe  

ef125f7a35d65a62902594b0b4c46812


RAT Generic Malware Malicious Packer PE File PE32 OS Processor Check .NET EXE VirusTotal Malware 		1.0 M 34 ZeroCERT

12161 2021-09-07 19:07 vbc.exe  

94253a7c421aeba9e411730ba3f3c897


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		12 15 1 8 8.6 M 18 ZeroCERT

12162 2021-09-07 19:08 Vids.exe  

09f9f48eea4e7bf45dc549f15e4d27e8


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 M 23 ZeroCERT

12163 2021-09-07 19:10 raccon.exe  

357f32eecd7be7427ccc0e7fab0ce386


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 M 23 ZeroCERT

12164 2021-09-07 19:11 vbc.exe  

1ad28c768524311e68f7db00b34e9c29


PE File PE32 VirusTotal Malware unpack itself Tofsee 		1 2 2 1.2 M 23 ZeroCERT

12165 2021-09-07 19:12 hv.exe  

385eccb9e711368035f0f329f98255ec


Gen2 ASPack Malicious Library Malicious Packer PE File PE32 OS Processor Check Malware download VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Creates executable files Windows utilities suspicious process WriteConsoleW Zeus Windows ComputerName Trojan DNS 		1 1 3 7.8 M 49 ZeroCERT

keyword