popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12901 2021-09-29 08:10 muti123warmuti.html  

8e895eb08eee6fe685fb9dab7a1ec5c1


Antivirus AntiDebug AntiVM PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		32 16 2 4.2 M ZeroCERT

12902 2021-09-29 08:20 b.exe  

03adc7bd4c01b446223c463e7c8240cc


Generic Malware Malicious Library Malicious Packer UPX PE File PE32 DLL OS Processor Check VirusTotal Malware AutoRuns Check memory Creates executable files Windows utilities suspicious process AppData folder Windows 		1 4.2 45 ZeroCERT

12903 2021-09-29 08:20 r.exe  

ea5c4a912a9454bec895a614a8c442eb


Themida Packer PE File .NET EXE PE32 unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware crashed 		3.6 ZeroCERT

12904 2021-09-29 08:22 s.exe  

c04496520501bc6a3b3f0b7f5f875a32


Themida Packer PE File .NET EXE PE32 VirusTotal Malware unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware crashed 		4.8 M 50 ZeroCERT

12905 2021-09-29 08:23 m.exe  

d2c73b170d0f9669214cd74ae6128068


Emotet RAT Generic Malware Malicious Library Antivirus Malicious Packer PE File PE32 DLL PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		9.0 M 38 ZeroCERT

12906 2021-09-29 10:07 doc.exe  

d8bc91e846e3d624814d4557681f33ad


PWS .NET framework email stealer Generic Malware DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS crashed 		1 11.4 M 26 ZeroCERT

12907 2021-09-29 10:07 ppt_82000007451308.exe  

e66d37e430a767a356d8fdeae27788d3


RAT Generic Malware PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		3.2 M 20 ZeroCERT

12908 2021-09-29 10:09 ppt_61102126305327.exe  

2ed76672668438c5129c82daeac7ef36


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS crashed 		1 12.0 M 31 ZeroCERT

12909 2021-09-29 10:10 ppt_00101570818.exe  

d57a65324f585b76a5109a9e24e15e36


RAT Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		7 16 2 8.4 M 21 ZeroCERT

12910 2021-09-29 10:11 vbc.exe  

de98fa31d56dd885da7947a242a7e315


NSIS Malicious Library PE File PE32 DLL VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder human activity check Windows ComputerName 		2 8.8 M 28 ZeroCERT

12911 2021-09-29 10:11 bluetwozx.exe  

9c353afe84dca6fda3c6168aa09ea311


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 15.2 M 35 ZeroCERT

12912 2021-09-29 10:13 vbc.exe  

d120d18e68d276e7624a42f550dc8773


NSIS Malicious Library PE File PE32 DLL VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows ComputerName crashed 		6.8 M 21 ZeroCERT

12913 2021-09-29 10:13 vbc.exe  

eb9158b121ed38379a2c6e3e91c21929


NSIS Malicious Library PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder ComputerName 		4.8 43 ZeroCERT

12914 2021-09-29 10:16 sb.exe  

e310cb3185d95e3dda42f0230b569d84


Generic Malware UPX Malicious Library PE File OS Processor Check PE32 PDB Check memory unpack itself AntiVM_Disk VM Disk Size Check 		1.2 M ZeroCERT

12915 2021-09-29 10:16 lv.exe  

1814662fda4a0aa4816c124a0fa12002


Gen1 Emotet Gen2 Themida Packer Generic Malware Malicious Library Anti_VM UPX Malicious Packer PE File PE32 DLL PE64 VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows crashed 		1 6.6 M 23 ZeroCERT

keyword