popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12571 2021-09-19 11:32 @XWELOFF_LZT.exe  

90a24f55c7665b24ed0d3492f0bc4b6a


RAT PWS .NET framework Gen2 Generic Malware Malicious Packer Malicious Library PE File OS Processor Check .NET EXE PE32 PNG Format PE64 DLL Browser Info Stealer Malware download FTP Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		8 10 6 4 12.8 M ZeroCERT

12572 2021-09-19 11:34 PublicDwlBrowser155.exe  

b4bf01f4cf5ab343a7f405ff247a8ec6


RAT NPKI Generic Malware PE File .NET EXE PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key crashed 		5 9 1 10.0 16 ZeroCERT

12573 2021-09-19 11:34 list11.exe  

2a69371ccb46bbc07aebe99359fd69b9


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		14 17 1 10.2 M 39 ZeroCERT

12574 2021-09-19 11:37 debit.exe  

4a3d3b6414d0c55e345416a8acde46a8


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder malicious URLs Windows 		12 14 6 10.4 M 20 ZeroCERT

12575 2021-09-19 11:37 list.exe  

ff1b657f20e7afc8202a40d189cdae59


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		10 20 1 8.4 M 40 ZeroCERT

12576 2021-09-20 09:34 matthew14.exe  

5d270754f01dc386e2fd92d17b712089


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 9.6 42 ZeroCERT

12577 2021-09-20 09:34 raccon.exe  

44e61e772bf265fd237fa5af9151ce4e


Malicious Library PE File PE32 PDB unpack itself 		1.0 ZeroCERT

12578 2021-09-20 09:36 pMsvVwER.exe  

8d8d7d4aba4420af2e126800a3139dd8


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 36 ZeroCERT

12579 2021-09-20 09:36 louise14.exe  

96ff8ba929c9de23b8c3aaafd9e32165


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 8.6 42 ZeroCERT

12580 2021-09-20 09:38 pub6.exe  

5b0002ddfa1c1b46a02302357915acae


Malicious Library PE File PE32 PDB unpack itself 		1.0 ZeroCERT

12581 2021-09-20 09:39 dawn14.exe  

549e51ddb6b22c9e5a6de97234b1de1e


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 8.6 46 ZeroCERT

12582 2021-09-20 09:41 mike18.exe  

2f59580ee2366c8c22bb7fb185fd3006


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.4 M 34 ZeroCERT

12583 2021-09-20 09:41 123.exe  

7924c098f35b7ff9e2deb0be7ee0151f


Antivirus Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PE File PE32 PE64 OS VirusTotal Malware Buffer PE AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities AppData folder malicious URLs Windows crashed 		1 9.8 M 19 ZeroCERT

12584 2021-09-20 09:43 customer2.exe  

dc70792e3bec9dbfd00abcceee8d849e


ASPack Malicious Library PE64 PE File OS Processor Check Browser Info Stealer Malware PDB Malicious Traffic Check memory Check virtual network interfaces IP Check Browser Remote Code Execution 		3 4 1 2 3.2 M ZeroCERT

12585 2021-09-20 09:44 Stubchik.exe  

d5d4f07e59ffad621f322b68c12e411e


RAT Generic Malware Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 PE64 OS Processor Check VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName DNS crashed 		4 5 4 2 12.6 M 29 ZeroCERT

keyword