popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12886 2021-09-28 16:13 uo.exe  

fcb2548f36fee756bde5fcf5c99e19b4


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		4 8 1 8.0 M 21 ZeroCERT

12887 2021-09-28 16:16 lv.exe  

990be1512e2d246835b3655ee103bf78


Gen1 Emotet Gen2 Themida Packer Generic Malware Malicious Library Anti_VM Malicious Packer PE File PE32 DLL PE64 VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows crashed 		1 6.2 M 26 ZeroCERT

12888 2021-09-28 16:16 hak.exe  

3b710cc2fd2ed7c2c71e88b128cb1297


Formbook PE File PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		12 28 2 3.2 M 43 ZeroCERT

12889 2021-09-28 16:17 mmss.exe  

0c837db4a275290db36c56c650445eeb


Generic Malware Themida Packer Anti_VM Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Remote Code Execution Firmware DNS Cryptographic key crashed 		2 7.4 M 13 ZeroCERT

12890 2021-09-28 16:17 file.exe  

881838479bd774a3e90aaba668a922d8


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 M 33 ZeroCERT

12891 2021-09-28 16:21 cc.exe  

4c70d5b1c63a468f7e0aedf64f93ca42


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		20 22 2 9.6 M 29 ZeroCERT

12892 2021-09-28 16:24 jol.exe  

51195e0d79dacd68acd8b5bcbc356ab1


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Downloader 		19 25 8 10.0 M 14 ZeroCERT

12893 2021-09-28 16:24 vbc.exe  

ab8ee5a9711e4616baf39951f00a1d91


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 13.4 M 12 ZeroCERT

12894 2021-09-28 17:07 winpro.exe  

fa0b89043edf03a3e3c27f0ad56114ea


Generic Malware Malicious Packer UPX Malicious Library PE File PE32 VirusTotal Malware RWX flags setting unpack itself Remote Code Execution crashed 		3.2 M 44 r0d

12895 2021-09-28 17:11 TNG.dll  

e889031780d41c9bfad18160301aae89


RAT Generic Malware PE File .NET DLL DLL PE32 VirusTotal Malware 		1.6 10 ZeroCERT

12896 2021-09-28 21:56 recital-1498700469.xls  

1f57d735aef14bf0f9609035c44d1187


DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM MSOffice File Check memory unpack itself suspicious process malicious URLs Tofsee 		3 6 2 4.2 guest

12897 2021-09-29 01:15 Iarsn_TaskInfo_v10_0_0_keygen....  

4b2c9dd6e75758dd58d9fcb9d8adbe67


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		1.4 7 guest

12898 2021-09-29 07:49 PPT_25084100000125.exe  

062e63a1422126e35e93a19aba338b64


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		11.4 34 ZeroCERT

12899 2021-09-29 07:54 RunPE.dll  

a042546ec4ebfa088dfcc4eda7e716da


RAT Generic Malware Malicious Packer PE File .NET DLL DLL PE32 PDB 		0.2 ZeroCERT

12900 2021-09-29 07:56 ctp1.exe  

c208dc846cb784a780a5e0904fa565e4


PWS Loki[b] Loki.m Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 7.4 58 ZeroCERT

keyword