popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12766 2023-05-30 17:12 INET.exe  

7f9f5628b1698378cecaff303fb4cf2d


PWS .NET framework Formbook SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Windows Browser Email ComputerName Cryptographic key Software crashed 		12.4 M 37 ZeroCERT

12767 2023-05-30 17:11 index.ps1  

d41d8cd98f00b204e9800998ecf8427e


Generic Malware Antivirus unpack itself 		0.4 ZeroCERT

12768 2023-05-30 16:38 QT367001.exe  

c72b6d0fa5da7249b6ddffe1b3d83363


Loki Loki_b Loki_m PWS .NET framework Formbook Hide_EXE Socket DNS PWS[m] Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 4 1 15.2 54 ZeroCERT

12769 2023-05-30 16:36 Signed Proposal pdf.exe  

6cac87c1e2aa3e15837dcfff9d23cf0c


Loki NSIS UPX Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 6 1 9.2 51 ZeroCERT

12770 2023-05-30 16:33 RV1-INV-2023090.exe  

e7eca1999e37695727ae022c0bc65d18


Loki NSIS UPX Malicious Library PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 6 1 9.6 53 ZeroCERT

12771 2023-05-30 16:30 DHL Receipt_AWB_20458290822.ex...  

e0bce4c29887875b2089b16fb21d4fad


Loki_b Loki_m PWS .NET framework Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 13.2 51 ZeroCERT

12772 2023-05-30 16:28 Shipping documents against Com...  

ffe9559fdba21527911e2c7a9536fc7e


Loki_b Loki_m Formbook Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Software 		1 15.2 55 ZeroCERT

12773 2023-05-30 16:27 Request PDA_MT Tanker 1.exe  

a1d3e7d0ecb80b47259ac1222c821090


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 14.0 M 47 ZeroCERT

12774 2023-05-30 16:25 Kimball Electronics PO NO45032...  

4d05c10b6ba4bf4e4db1c49232f2e144


Loki Loki_b Loki_m PWS .NET framework RAT Generic Malware Antivirus Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c powershell PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 1 7 1 16.8 45 ZeroCERT

12775 2023-05-30 16:21 MATERIAL AVT MEPZ FSL2022.ex...  

81dfce6bac91a9a7bd90613995595aa3


Loki Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software crashed 		2 1 6 1 13.4 49 ZeroCERT

12776 2023-05-30 16:16 IMG-506402301.exe  

acd18f56751acb94768ff35aca47b1e1


Loki_b Loki_m PWS .NET framework UPX Socket DNS PWS[m] AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 14.8 51 ZeroCERT

12777 2023-05-30 16:13 270EA03E47CD4B98478524B51302E1...  

270ea03e47cd4b98478524b51302e134


Loki Loki_b Loki_m Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		2 1 5 1 7.6 63 guest

12778 2023-05-30 15:15 kds7uq5kknv.exe  

433dbed8a7afbf15bfee967c63a50769


UPX Malicious Library OS Processor Check PE File PE32 Browser Info Stealer Malware download VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself Collect installed applications WriteConsoleW installed browsers check Ransomware Lumma Stealer Browser ComputerName Firmware DNS crashed 		1 1 2 1 12.6 M 50 ZeroCERT

12779 2023-05-30 13:41 06777499.exe  

6392f9473488585adf633a7fde82f28b


Redline Gen1 Emotet PWS .NET framework RAT RedLine Stealer UPX Malicious Library Admin Tool (Sysinternals etc ...) Confuser .NET SMTP Code injection HTTP PWS[m] Http API Internet API AntiDebug AntiVM CAB PE File PE32 OS Processor Check DLL .NET EXE Browser Info Stealer RedLine Malware download Amadey FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files RWX flags setting unpack itself Windows utilities Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Ransomware Lumma Stealer Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		5 3 14 2 22.8 M 39 ZeroCERT

12780 2023-05-30 10:47 File_pass1234.7z  

0d6f6b6bd8f63cb7ea5854d7fb265cb4


PWS[m] Escalate priviledges KeyLogger AntiDebug AntiVM Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself IP Check PrivateLoader Tofsee Windows DNS 		11 24 9 3 6.2 M 9 ZeroCERT

keyword