popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12601 2021-09-21 18:10 428558fcf4133715cf08d2fdf904b3...  

4849ab316b3dcde68a2a23c22dee2d98


Malicious Library PE File PE32 VirusTotal Malware Checks debugger RWX flags setting unpack itself suspicious process ComputerName crashed 		4.2 M 59 pavan85

12602 2021-09-22 09:21 zCloud.exe  

c6855b8e550bcdd88084643f747070ac


UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName crashed 		3 6 1 10.0 17 ZeroCERT

12603 2021-09-22 09:23 jj10-crypt.exe  

7dd1032cbeb2b3f61e727060a65a839f


Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		11.0 M 29 ZeroCERT

12604 2021-09-22 09:23 new_requests_5022058.exe  

d883d9c4eb5bbaf4d4b3131d1ec71349


RAT Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key crashed 		1 8 1 13.8 M 32 ZeroCERT

12605 2021-09-22 09:25 572805109.exe  

b510e124d32628b7318c25a09d580686


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 12.2 M 30 ZeroCERT

12606 2021-09-22 09:25 enquiry_3013577701209ppt.exe  

2c7d4e78f74cc716f23492ad19daf763


RAT Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key crashed 		1 8 1 13.6 M 27 ZeroCERT

12607 2021-09-22 09:27 product_specifications_details...  

de964e4eddeb6ff30b6382af77de7650


RAT Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key crashed 		1 8 1 13.2 M 24 ZeroCERT

12608 2021-09-22 09:29 settings.exe  

19de024852f18e867582c47b9630e7a5


RAT PWS .NET framework Generic Malware UPX Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 1 12.0 M 22 ZeroCERT

12609 2021-09-22 09:46 sefile.exe  

98c9d17d06b52192e9946fc7f4cba934


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 27 ZeroCERT

12610 2021-09-22 09:47 1115744375.exe  

c7be1b666b8ec3b2a43bb1713fba6fdd


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware MachineGuid Malicious Traffic Checks debugger buffers extracted Tofsee DNS 		2 3 1 3.8 53 ZeroCERT

12611 2021-09-22 09:48 abo.exe  

07a6157b0c4e67d0cc7b911af53963f1


PWS .NET framework Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		12.2 M 26 ZeroCERT

12612 2021-09-22 09:50 vbc.exe  

571fbd383fdd865a8232b66a32fcdea1


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 18 1 8.4 36 ZeroCERT

12613 2021-09-22 09:50 mswindow.exe  

3cfea06304d4f15a2a7b9cf0ba55a05f


PWS .NET framework Generic Malware Antivirus PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key crashed 		7.6 34 ZeroCERT

12614 2021-09-22 09:51 1062852386.exe  

a74d8695a741f5dd6f4384b52743387d


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 8.0 50 ZeroCERT

12615 2021-09-22 09:52 19.exe  

ceb3dd231090ce93da86c04e1616c305


RAT Generic Malware UPX PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.6 M 35 ZeroCERT

keyword