popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12346 2021-09-13 09:03 soft.exe  

2a6e41a9ee4f93036a0a2d614510c6ff


Gen1 Gen2 Malicious Library Malicious Packer ASPack UPX PE File PE32 DLL OS Processor Check VirusTotal Email Client Info Stealer Malware MachineGuid Malicious Traffic Check memory buffers extracted Creates executable files Windows utilities Collect installed applications suspicious process AppData folder installed browsers check Tofsee Ransomware Windows Browser Email ComputerName DNS 		4 3 4 3 8.6 M 24 ZeroCERT

12347 2021-09-13 09:07 CurrencyCalculatorInstaller.ex...  

c5cb4a9e57a7d9a0ef934bada91aa881


RAT PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows Cryptographic key 		2 4 1 3.8 3 ZeroCERT

12348 2021-09-13 09:16 SmartPDF.exe  

9774cdf92008b796b09b39ee32e48821


NPKI Generic Malware DNS Socket Create Service BitCoin Escalate priviledges KeyLogger Code injection ScreenShot AntiDebug AntiVM PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Auto service Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName Firmware DNS CoinMiner 		6 3 15.0 35 ZeroCERT

12349 2021-09-13 09:27 java.exe  

eda88d322065a9b364e4be013bb849f4


PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency Check memory Checks debugger ComputerName Firmware 		2 1 3.2 22 ZeroCERT

12350 2021-09-13 09:32 task.exe  

5120630343cdfdc8698f7ce9d9991894


PE64 PE File VirusTotal Open Directory Cryptocurrency Miner Malware Cryptocurrency AutoRuns Malicious Traffic Checks debugger Creates executable files Auto service Windows Exploit Remote Code Execution DNS 		2 3 7 1 5.2 M 14 ZeroCERT

12351 2021-09-13 09:42 raccon.exe  

e45bef85aabecedb6ba2e4b0aaf7be90


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		1.8 M 26 ZeroCERT

12352 2021-09-13 14:37 admin.php  

dcbcd8c4fcdd17079caa96f80be4dd04


PE File OS Processor Check DLL PE32 VirusTotal Malware PDB 		0.6 2 guest

12353 2021-09-13 16:45 obizx.exe  

ab134b69986e53349affb1cf8cf863c1


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 21 Kim.GS

12354 2021-09-13 17:37 task.exe  

5120630343cdfdc8698f7ce9d9991894


UPX PE64 PE File VirusTotal Open Directory Malware AutoRuns Malicious Traffic Checks debugger Creates executable files Auto service Windows Exploit Remote Code Execution DNS 		2 1 6 1 5.4 M 24 r0d

12355 2021-09-13 18:02 Inv_INV410599.jar  

2a3426e77f270bf7d46e1f3599541271


Gen2 Gen1 NPKI Formbook Generic Malware Malicious Library Malicious Packer UPX Admin Tool (Sysinternals etc ...) ASPack PE File OS Processor Check DLL PE32 Malware download Adwind VirusTotal Malware AutoRuns Check memory Checks debugger WMI Creates executable files RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder Windows Java ComputerName DNS crashed 		1 1 8.4 M 21 ZeroCERT

12356 2021-09-13 18:17 Stub.exe  

3c4359296c65223a5b7acfc76e1f4ecd


RAT Generic Malware Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 OS Processor Check .NET E VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName DNS 		1 3 3 1 11.0 M 37 ZeroCERT

12357 2021-09-13 18:20 Quotation.exe  

4b070580f22304cb805dd7ad83cf4152


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 4 13.2 27 ZeroCERT

12358 2021-09-13 18:33 .---------------..------------...  

a5fedf6b6cb4f47640a5f2d8e36d09e7


RTF File doc AntiDebug AntiVM LokiBot Malware download VirusTotal Malware c&c MachineGuid Malicious Traffic Check memory exploit crash unpack itself Tofsee Windows Exploit Advertising Google DNS crashed Downloader 		4 6 13 5.6 29 ZeroCERT

12359 2021-09-13 18:41 vbc.exe  

6ce7cc1f376f6bd9d090eaf04ef72dfe


UPX PE File PE32 Check memory RWX flags setting unpack itself anti-virtualization Remote Code Execution 		2.2 ZeroCERT

12360 2021-09-14 07:35 vbc.exe  

9ac371a30cbd9fec68c18a1b2405d69b


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software crashed 		3 2 6 13.2 26 ZeroCERT

keyword