popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12541 2021-09-18 21:40 Japán vízkúra.pdf.igvm  

c27de5e6764d3f0cbce3dae0117a66f6


PDF 		guest

12542 2021-09-18 22:04 11 billentyűkombináció, ami me...  

536838e1ba71280e538c83079e48495a


PDF 		guest

12543 2021-09-18 22:10 11 billentyűkombináció, ami me...  

536838e1ba71280e538c83079e48495a


PDF 		guest

12544 2021-09-19 10:42 Kdkvxufvvymmebagxmoolsfkmwkkqa...  

663dfa8f055ba37eaa8bffc10026f311


UPX Malicious Library PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee Remote Code Execution crashed 		1 2 1 2.8 M 26 ZeroCERT

12545 2021-09-19 10:42 0d.exe  

3a2984391e5a67689e60830f82700e74


RAT Generic Malware ScreenShot Http API Steal credential AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 3 1 10.2 12 ZeroCERT

12546 2021-09-19 10:44 vbc.exe  

3cb12929c01dcbf5af156b6ce3fa3a6f


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 3 7 1 13.4 M 19 ZeroCERT

12547 2021-09-19 10:44 cyber-server.exe  

6d4254084c9aff0d20d9c1cdfb7a31ec


RAT PWS .NET framework Generic Malware Malicious Packer PE File .NET EXE PE32 VirusTotal Malware ICMP traffic IP Check DNS 		1 3 1 4.4 M 61 ZeroCERT

12548 2021-09-19 10:46 mygod.exe  

60a01c98200c36b4917c453feedbf79d


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		10.4 M 40 ZeroCERT

12549 2021-09-19 10:47 vbc.exe  

866d1aeb69daac5e6e4dda938edf8d26


Malicious Library PE File OS Processor Check PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself Remote Code Execution 		14 27 1 4.0 M 49 ZeroCERT

12550 2021-09-19 10:49 Stub.exe  

5eaf5e0662c263dd7acc3476067991a2


RAT PWS .NET framework NPKI Gen2 Generic Malware Malicious Packer Malicious Library PE64 PE File OS Processor Check .NET EXE DLL VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS 		4 4 2 4 8.4 M 36 ZeroCERT

12551 2021-09-19 10:49 Stub.exe  

5eaf5e0662c263dd7acc3476067991a2


RAT PWS .NET framework Gen2 Generic Malware Malicious Packer Malicious Library PE64 PE File OS Processor Check .NET EXE DLL VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS 		4 5 2 4 9.0 M 36 ZeroCERT

12552 2021-09-19 10:52 vbc.exe  

2a59d2396654692dc87a81df7554b608


Malicious Library PE File OS Processor Check PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself Remote Code Execution DNS 		12 24 1 5.6 M 49 ZeroCERT

12553 2021-09-19 10:53 templezx.exe  

fbc43fdfa54c1ed1a41f4618d695e784


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 4 13.4 M ZeroCERT

12554 2021-09-19 10:53 terrin.exe  

4bcdcb852861a9d7f40a26bc825882b2


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 M 37 ZeroCERT

12555 2021-09-19 10:55 n.wbk  

f001c279ed34264cd5bd0acf4987cec1


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS Cryptographic key crashed Downloader 		3 6 5.2 M 24 ZeroCERT

keyword