popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12871 2021-09-28 15:57 ruzik.exe  

2baefa0083d4c22f178dbd8805728ecc


Generic Malware Themida Packer Anti_VM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		1 3 1 11.0 16 ZeroCERT

12872 2021-09-28 15:57 new.exe  

c6285a23482e0420a096c10a6c245513


Themida Packer PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		1 3 1 11.8 34 ZeroCERT

12873 2021-09-28 15:59 update.exe  

4f103b3d193ab688e6595b09ca78c759


Malicious Library PE File PE32 VirusTotal Malware unpack itself Tofsee Remote Code Execution 		2 2 2.2 M 37 ZeroCERT

12874 2021-09-28 16:00 es.exe  

59a50d997d0b4a35bfacdea5d1ce1851


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Downloader 		4 9 8 9.2 M 32 ZeroCERT

12875 2021-09-28 16:01 vbc.exe  

b397c9903b6967ddf77f6d484a4b4d4b


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		10.0 M 11 ZeroCERT

12876 2021-09-28 16:01 vbc.exe  

d0a801b89e60cb6ccf654a9baa290783


NSIS Malicious Library PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 M 21 ZeroCERT

12877 2021-09-28 16:04 vbc.exe  

5e11788d890d97045cd8d830b25527f6


NSIS Malicious Library PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 10.4 M 29 ZeroCERT

12878 2021-09-28 16:04 soft.exe  

82f7734fef8ee0789cf270f292651cbe


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware unpack itself Tofsee Remote Code Execution 		2 2 1.8 M 16 ZeroCERT

12879 2021-09-28 16:06 mixxe.exe  

7b1bc3c113a48b6ca69d427b0e1cfd24


Generic Malware Themida Packer Malicious Library PE File .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key crashed 		1 3 1 10.4 M 16 ZeroCERT

12880 2021-09-28 16:07 lv.exe  

d0b364ad8cb0f526dabd281479270579


NPKI Emotet Gen1 Gen2 Themida Packer Generic Malware Malicious Library Anti_VM UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal cred VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows crashed 		1 7.4 M 26 ZeroCERT

12881 2021-09-28 16:08 sya.exe  

13e41e7ab512d2d8b1818d15a24f262c


NSIS Malicious Library PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 M 28 ZeroCERT

12882 2021-09-28 16:08 bobo.exe  

c203b85591cefe40d1f7ed64e2e6ff9c


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		11.4 M 38 ZeroCERT

12883 2021-09-28 16:10 gobro.exe  

73fd366a5572fca7a981ed7a3f0b6150


Malicious Library PE File PE32 VirusTotal Malware unpack itself Tofsee Remote Code Execution 		2 2 2.0 M 21 ZeroCERT

12884 2021-09-28 16:10 bin.exe  

9f66d58c838608fdd0be51b576e7185d


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		5 10 1 3.2 M 41 ZeroCERT

12885 2021-09-28 16:13 ooo.exe  

2465c0064588369df56b47c28e38aa7e


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 7 2 7.8 M 14 ZeroCERT

keyword