popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12631 2021-09-22 10:10 abu.exe  

ae12cf1192ea6c6e686379e5fdf21999


PWS .NET framework Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		13.2 M 20 ZeroCERT

12632 2021-09-22 10:12 product_specifications_details...  

3bd6f12e4d6f4ed06a414a6cb100f546


RAT Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 9 1 12.8 M 26 ZeroCERT

12633 2021-09-22 10:13 ntcm.dll  

9f3d6ad1891e088e16f93a17da7e338e


PE64 PE File DLL VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD Tofsee DNS 		1 3 2 4.8 M 34 ZeroCERT

12634 2021-09-22 10:15 kyc1.exe  

d8df42168344da59b56a583991be0ac4


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 2 1 12.4 M 12 ZeroCERT

12635 2021-09-22 10:18 vbc.exe  

15c0994e6c4cff319deb5e35339c204b


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself DNS 		8 12 2 9.6 M 34 ZeroCERT

12636 2021-09-22 10:19 ConsoleApp13.exe  

b5b75b3da47bb461fceb52a2c69d1240


AgentTesla browser info stealer Generic Malware Google Chrome User Data Antivirus Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key DDNS crashed keylogger 		2 1 12.8 M 22 ZeroCERT

12637 2021-09-22 10:22 tiganazx.exe  

baffd35ab2f86aa9a397a286ac5df964


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		1 5 1 8.6 M 13 ZeroCERT

12638 2021-09-22 10:24 1056935770.exe  

7b4cdcad8ab6a42017cd93d9639074ae


Generic Malware UPX Antivirus PE64 PE File VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		5.0 M 33 ZeroCERT

12639 2021-09-22 10:26 flfile.exe  

0ce36f818bd21747d974bd4e01a5d941


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.2 M 40 ZeroCERT

12640 2021-09-22 22:07 file.exe  

01b2e0187b466e2193285ee7a0abc6ce


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 22 ZeroCERT

12641 2021-09-22 22:07 1.exe  

884d66f9b2674168bdcb7363bb335e8b


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		2.2 M 52 ZeroCERT

12642 2021-09-22 22:09 MSOfficeUpdate.cab  

0907498bc0ee4cee45b37df6a186b602


Escalate priviledges KeyLogger AntiDebug AntiVM VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.2 18 ZeroCERT

12643 2021-09-22 22:09 2047321040.exe  

2be66ce2b5cfdfec51cdc633577f0cb4


RAT Eredel Stealer Extended PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 15.4 M 32 ZeroCERT

12644 2021-09-22 22:11 952392868.exe  

e7c0b56dd1a23c604dfef02fde250715


Malicious Library AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE PDB suspicious privilege Code Injection Checks debugger buffers extracted unpack itself Windows DNS keylogger 		1 1 12.6 M 47 ZeroCERT

12645 2021-09-22 22:13 me.exe  

079627807595b290ff96d0d78f981055


Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		16 18 3 9.0 M 33 ZeroCERT

keyword