popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12721 2021-09-23 17:18 lv.exe  

b8a2adb46798ea4ac7961ed4af59bd08


Gen1 Gen2 Themida Packer Generic Malware Malicious Library Anti_VM Malicious Packer PE File PE32 PE64 DLL VirusTotal Malware Check memory Creates executable files unpack itself Checks Bios Detects VMWare AppData folder VMware anti-virtualization Windows Firmware crashed 		6.8 M 37 ZeroCERT

12722 2021-09-23 17:19 file01.exe  

1bc4ccc0c1f64df605fe8665ce0337e3


Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.2 M 23 ZeroCERT

12723 2021-09-23 17:22 file.exe  

fb38ecfc9a0b6f8d92beee0528483d9e


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 3.0 M 42 ZeroCERT

12724 2021-09-23 17:22 0922_1191338386338.doc  

273d4eb1cb3c5d92107aa30a70090ddf


hancitor VBA_macro Generic Malware MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 1 7.4 M guest

12725 2021-09-23 17:23 vbc.exe  

c1d5bfbc58841648fa9a46768b6a408c


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 12.0 M 11 ZeroCERT

12726 2021-09-23 17:24 vbc.exe  

ccb092ded62c0a7ce793daa1873db0cb


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		2.2 M 11 ZeroCERT

12727 2021-09-23 17:27 inlinelots.png  

dd37687f508cb88b08f932fae1e2a767


Emotet Gen1 Malicious Packer Malicious Library AntiDebug AntiVM PE File OS Processor Check DLL PE32 Dridex TrickBot Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Kovter ComputerName DNS crashed 		11 9 4 10.6 M ZeroCERT

12728 2021-09-23 17:28 vbc.exe  

c8e61cce27a796697bba399a93a302a8


PWS Loki[b] Loki.m .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		5 13.6 M 23 ZeroCERT

12729 2021-09-23 17:30 hgfnXcvfm.exe  

7582915797c3ea5d7a52ca8196d641e7


PWS Loki[b] Loki.m UPX Malicious Library DNS AntiDebug AntiVM PE File OS Processor Check PE32 Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS DDNS Software 		2 12.4 M ZeroCERT

12730 2021-09-23 17:32 vbc.exe  

5031b2a1f347c6e0f57c268656c5e74d


PWS Loki[b] Loki.m .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 11.8 M 14 ZeroCERT

12731 2021-09-23 17:34 raccon.exe  

b3794d38a4b03fcb0b7b3eaee4ab1c9f


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 M 19 ZeroCERT

12732 2021-09-23 17:57 vbc.exe  

ccb092ded62c0a7ce793daa1873db0cb


Generic Malware Malicious Packer UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		2.2 M 11 r0d

12733 2021-09-23 18:33 Clipr.exe  

eec17dc61f01426b05aa6a26b89cba96


RAT Generic Malware UPX PE File .NET EXE PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.2 M 10 ZeroCERT

12734 2021-09-23 18:37 DownFlSetup999.exe  

22645131985dbfd4405df8298003ea77


RAT Generic Malware Themida Packer Anti_VM Malicious Library PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder VMware anti-virtualization installed browsers check Tofsee Ransomware Windows Browser Email ComputerName Firmware DNS Cryptographic key Software crashed 		10 10 2 7 16.2 M 23 ZeroCERT

12735 2021-09-23 18:43 0922_3501454333268.doc  

128be827b25a69a27e187c0df066ed82


hancitor VBA_macro Generic Malware MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 1 8.2 M guest

keyword