popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12451 2021-09-15 12:37 Virtual private network.js  

f1680aa55c88220bcf83e24d89628cc9


VirusTotal Malware ComputerName 		1.0 25 ZeroCERT

12452 2021-09-15 13:47 ec.exe  

4ab2935ce1e3b2e7032cc505f0850809


Malicious Library UPX AntiDebug AntiVM PE64 PE File VirusTotal Malware Code Injection Creates executable files Windows utilities suspicious process WriteConsoleW Windows 		5.2 M 40 ZeroCERT

12453 2021-09-15 13:50 test3.exe  

fa0c8c44a1586d075fe128e07844ef1d


RAT PWS .NET framework Generic Malware Malicious Packer UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiV VirusTotal Malware Code Injection AppData folder WriteConsoleW Tofsee ComputerName DNS 		3 2 5.8 M 32 ZeroCERT

12454 2021-09-15 13:56 12332123331.exe  

f6b0a679d3821681191512265666d981


RAT PWS .NET framework Generic Malware Malicious Packer UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiV VirusTotal Malware Code Injection Check memory AppData folder WriteConsoleW Tofsee ComputerName DNS 		3 2 6.6 34 ZeroCERT

12455 2021-09-15 16:01 loadetc.exe  

2bd18b0ce7aa8dfaee0e922090aae138


Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 Malware download VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Check memory Creates executable files Windows utilities suspicious process WriteConsoleW Windows DNS Downloader 		1 1 5 1 7.8 M 38 r0d

12456 2021-09-15 18:13 phorm.exe  

400fc2e410b02fb12db7634c8221f51c


Worm Phorpiex Malicious Library PE File PE32 VirusTotal Malware AutoRuns PDB Windows 		3.0 34 ZeroCERT

12457 2021-09-15 18:14 svch.exe  

ddc1e4f7216d422e2534c4cbc2ff34d5


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key Downloader 		2 5 5 10.0 25 ZeroCERT

12458 2021-09-15 18:15 setup.exe  

498d616eef919be56eb9760a0d749500


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 28 ZeroCERT

12459 2021-09-15 18:17 sorptions.exe  

f8146a71dedc3eeeaa1624d6832c39a4


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		18 17 1 10.6 20 ZeroCERT

12460 2021-09-15 18:55 vbc.exe  

4c658db84a58ce7ec0c2f2eb9f14c97c


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM PE File .NET EXE PE32 GIF Format Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AppData folder human activity check Tofsee Windows ComputerName DNS Cryptographic key 		1 5 2 14.2 27 ZeroCERT

12461 2021-09-16 08:57 3r.jpeg  

3eb3bb1d54b8be3ca1c573e82c5ae51e

 ZeroCERT

12462 2021-09-16 08:58 enquiry_6307300022png.exe  

e552183d16e0d6629c88a4a163d266fc


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName crashed 		11.2 23 ZeroCERT

12463 2021-09-16 09:00 vbc.exe  

495f38b437ff5fc9f49d2d77842fe53b


Lokibot PWS Loki[b] Loki.m Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 13.0 M 24 ZeroCERT

12464 2021-09-16 09:04 qwerty123123.html  

31c4efdb18099a92f2f4c6cd82a05263


Antivirus AntiDebug AntiVM MSOffice File PNG Format Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		31 16 2 4.2 ZeroCERT

12465 2021-09-16 09:06 vbc.exe  

4399c694e88f3f32d22d91c6c4a173ed


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself anti-virtualization Remote Code Execution 		4.2 M 37 ZeroCERT

keyword