popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12661 2021-09-22 22:30 10.exe  

29f6d019b55cd3ab946ca70651a2bd8c


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 PE64 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		4 8 4 15.6 M 30 ZeroCERT

12662 2021-09-22 22:32 vbc.exe  

f865e60134bf6774d24e03d2907c9791


PWS Loki[b] Loki.m .NET framework Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 3 7 12.4 ZeroCERT

12663 2021-09-22 22:32 18.exe  

5389b036dc60417f5d0df36e82131b63


Gen1 Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 OS Processor Check DLL Browser Info Stealer Malware download VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Stealer Windows Browser Email ComputerName DNS 		8 1 4 11.2 M 19 ZeroCERT

12664 2021-09-22 22:33 21061736.exe  

24a83981517c299c8b10b9dd5ca2620f


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 8.6 M 50 ZeroCERT

12665 2021-09-22 22:34 PublicDwlBrowser1100.exe  

94c17903ebb08d6e352dccce353d95d4


RAT Generic Malware Malicious Packer PE File .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself 		2.8 M 20 ZeroCERT

12666 2021-09-22 22:35 new.exe  

e1c271fec5a9b690482b700d4ed8316b


PWS Loki[b] Loki.m Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 13.8 M 24 ZeroCERT

12667 2021-09-22 22:36 buildcpils.exe  

26b9716419a2eac7f4b367e6cc06a946


RAT Generic Malware PE64 PE File OS Processor Check PNG Format VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS 		3 2 7.2 M 17 ZeroCERT

12668 2021-09-22 22:38 vbc.exe  

d362ffc6b594c617852f20b87ab4bbef


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		8 17 1 9.4 M 44 ZeroCERT

12669 2021-09-22 22:38 PBrowFile11.exe  

4a0f9d7e858b278ed038fc3b303d61f7


RAT Generic Malware Malicious Packer PE File OS Processor Check .NET EXE PE32 VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself 		2.6 M 19 ZeroCERT

12670 2021-09-22 22:40 243234193.exe  

358af97491dd7d9191744789b0f9e87f


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 8.0 M 41 ZeroCERT

12671 2021-09-22 22:41 softedont.exe  

271dd1b7b71a59842bac41e1be96b697


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 3.0 M 52 ZeroCERT

12672 2021-09-22 22:42 download.php  

f00246dd362f2c57a69b82099bf4e4ea

VirusTotal Malware 		0.8 M 25 ZeroCERT

12673 2021-09-22 22:43 6.exe  

4688225e63fefcf0b95378bd013589f7


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 M 39 ZeroCERT

12674 2021-09-22 22:45 rgo.exe  

c4f267cb881e0a7f999b3e639772b351


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.4 M 34 ZeroCERT

12675 2021-09-23 08:25 vbc.exe  

014c2e92efa4666879aa2bfae030be10


Loki PWS Loki[b] Loki.m .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 13.0 M 25 ZeroCERT

keyword