popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12556 2021-09-19 10:56 vbc.exe  

66ce1420280eceebeab924165f28b7bb


PWS .NET framework Gen2 Emotet Gen1 Generic Malware NSIS Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) ASPack Anti_VM KeyLogger ScreenShot AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process AppData folder WriteConsoleW VMware anti-virtualization installed browsers check Windows Browser ComputerName DNS Software 		1 16.2 M 45 ZeroCERT

12557 2021-09-19 10:58 vbc.exe  

de8a80136d8b6c2002ba8473bda2a617


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		26 28 2 5.2 M 28 ZeroCERT

12558 2021-09-19 10:58 new.exe  

0fa96c805292abfab6d01768050a0d3c


RAT Generic Malware UPX AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		1 3 1 12.2 M ZeroCERT

12559 2021-09-19 10:59 Tcx5xxXPl9GOucJ.exe  

04ecb65ad3407b89abab206a1b921e5c


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS crashed 		1 11.0 M 25 ZeroCERT

12560 2021-09-19 11:00 CurrenyCalculatorInst.exe  

63fe4796434aad20a0ccbb0944ea0f02


Themida Packer Generic Malware Malicious Library Anti_VM Antivirus UPX Admin Tool (Sysinternals etc ...) DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Dow Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW VMware anti-virtualization installed browsers check Tofsee Windows Exploit Browser ComputerName Firmware DNS Cryptographic key Software crashed 		5 12 1 17.4 M 38 ZeroCERT

12561 2021-09-19 11:00 crock  

e74b2720eaf32bfc409eb52a3d5e937f


RAT Generic Malware Malicious Packer Antivirus PE64 PE File VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		7.6 M 40 ZeroCERT

12562 2021-09-19 11:15 kok.exe  

2b0eb2dffd9788bfb9390e060f5e4bcc


PWS .NET framework Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 M 24 ZeroCERT

12563 2021-09-19 11:15 753.exe  

af3e98549b975158f54ef8b171182d50


Admin Tool (Sysinternals etc ...) Malicious Library UPX AntiDebug AntiVM PE File PE32 PE64 Malware download VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Creates executable files Windows utilities suspicious process WriteConsoleW Windows DNS Downloader 		1 1 5 8.6 M 46 ZeroCERT

12564 2021-09-19 11:17 xxxx1_2021-09-14_09-27.exe  

f343214355c07ba17b3726491847787a


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 47 ZeroCERT

12565 2021-09-19 11:20 .svchost.exe  

a6288732dfc7779369a4712b345070fb


Generic Malware UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself 		1.8 M 35 ZeroCERT

12566 2021-09-19 11:26 System64.exe  

a2968300e88e5c7f392ea704e39ff9b4


Gen2 RAT Gen1 PWS .NET framework Generic Malware Malicious Packer Antivirus Malicious Library PE64 PE File OS Processor Check .NET EXE VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Check memory Checks debugger unpack itself Auto service Windows ComputerName 		4.6 M 48 ZeroCERT

12567 2021-09-19 11:28 ZZZZZ.exe  

2d42f56f58a4c19df022913160949c76


RAT Generic Malware Themida Packer Malicious Packer PE File PE32 OS Processor Check .NET EXE PE64 VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key crashed 		5 6 8 2 12.4 M 28 ZeroCERT

12568 2021-09-19 11:28 xmrig.exe  

4f5bbe6b657b6f5874e99baf62af5555


PE64 PE File VirusTotal Malware Checks Bios anti-virtualization crashed 		2.4 32 ZeroCERT

12569 2021-09-19 11:29 PublicDwlBrowser144.exe  

365a5fd9a3835928d4db289bbc3927a7


RAT NPKI Generic Malware PE File .NET EXE PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key crashed 		4 8 1 9.2 12 ZeroCERT

12570 2021-09-19 11:32 ZZ.exe  

1a64fb26106ee3640698eb45f664b760


RAT PWS .NET framework Gen2 NPKI Generic Malware Malicious Packer Malicious Library PE File OS Processor Check .NET EXE PE32 PE64 DLL PNG Format Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		6 9 6 4 12.8 M 37 ZeroCERT

keyword