popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12181 2021-09-08 09:36 vbc.exe  

3e7e25ad1c141f146e5ef2b18e624886


Dimnie PE File PE32 VirusTotal Malware Tofsee 		1 2 2 1.0 M 36 r0d

12182 2021-09-08 09:38 PAYMENT.exe  

d16088a5dce52983fccd16363d805cf7


Dimnie PE File PE32 VirusTotal Malware unpack itself Tofsee 		1 2 2 1.0 18 r0d

12183 2021-09-08 09:44 template.dotm  

51a5d75a820382d1f3cb2978f64e5ae4


VBA_macro Generic Malware Antivirus Malware download Vulnerability VirusTotal Malware powershell suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName DNS Cryptographic key 		1 1 5 10.4 M 28 ZeroCERT

12184 2021-09-08 09:44 rollerkind.exe  

39c975f6377274ff7240746aa53ad1a6


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.0 M 31 ZeroCERT

12185 2021-09-08 09:46 osamazx.exe  

4d94d8bf0fca86712a541658c8c0025f


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.6 M 20 ZeroCERT

12186 2021-09-08 09:46 TLH_110503078801.exe  

6f8bb2ff11646a8e47c1b2a27d475010


PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic RWX flags setting unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		3 12.0 M 31 ZeroCERT

12187 2021-09-08 09:49 vbc.exe  

8f388b3312600431d2eb17b497ab3ee2


RAT Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 1 10.2 M 17 ZeroCERT

12188 2021-09-08 09:49 CRYPT_INSTALLS.exe  

56c100bab6222d310357dad74157a447


RAT NPKI Emotet Gen1 Generic Malware UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDeb Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces AppData folder malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		4 6 6 17.4 M 22 ZeroCERT

12189 2021-09-08 09:50 INSTALLS.exe  

10ef944af097dfefef2b1e3b26fd2017


RAT PWS .NET framework Generic Malware PE File PE32 OS Processor Check .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 7.6 M 29 ZeroCERT

12190 2021-09-08 09:51 odinakazx.exe  

ac9d0d3e4b472040eb5b614c2577103b


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7 17 1 4 7.8 M 27 ZeroCERT

12191 2021-09-08 09:53 globalzx.exe  

70dc1affd1eb47ac88c155fde4bab4d6


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.6 M 20 ZeroCERT

12192 2021-09-08 09:53 famzlogszx.exe  

d61989608bebc11c9bd867ebffae126e


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		1 4 1 8.6 M 19 ZeroCERT

12193 2021-09-08 09:56 IMG_80350001.exe  

f88fe2ffbc0ac8b13baa8cdcb55bab28


RAT PWS .NET framework Generic Malware UPX Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic RWX flags setting unpack itself powershell.exe wrote suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed 		10 12.4 M 34 ZeroCERT

12194 2021-09-08 09:56 BLT-750108002.exe  

4e3f9aaa521bd82e3b2902d528e51685


RAT PWS .NET framework Generic Malware UPX Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic RWX flags setting unpack itself powershell.exe wrote suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed 		10 12.2 M 28 ZeroCERT

12195 2021-09-08 09:58 rrrem.exe  

c4ffb0ae8bc377ff6062360971fb1037


AgentTesla RAT PWS .NET framework browser info stealer Generic Malware Google Chrome User Data UPX Antivirus Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11 14.4 M 17 ZeroCERT

keyword