popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13051 2021-10-03 10:00 1.dll  

c6312fbf8d344014804200a3101a6379


Malicious Library PE File OS Processor Check DLL PE32 Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 5 5 6.0 14 ZeroCERT

13052 2021-10-03 10:03 NetFrame.exe  

935adaea999dc3ad0672636dced6011e


Generic Malware Antivirus Malicious Library PE64 PE File OS Processor Check GIF Format powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Windows ComputerName Cryptographic key 		2 4 2 6.0 M ZeroCERT

13053 2021-10-03 10:03 lv.exe  

c70150d4634ccf7bb7733ebdb4072f0f


Gen1 Emotet Gen2 Themida Packer Generic Malware Malicious Library Anti_VM Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Do VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows crashed 		1 7.0 M 26 ZeroCERT

13054 2021-10-03 10:09 2.trf.ps1  

35e8723ab0414fa2f1d4db45d52e2254


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.6 M 12 ZeroCERT

13055 2021-10-04 10:12 sefile3.exe  

94fa890b7a91f842e006e1c7c795b616


Malicious Library PE File PE32 PDB unpack itself Remote Code Execution 		1.2 ZeroCERT

13056 2021-10-04 10:13 downloadmanager.exe  

17fe15c3f5f28d07fa885bf7099163ef


Emotet Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware PDB Code Injection Check memory Creates executable files unpack itself Windows utilities WriteConsoleW Windows 		5.4 14 ZeroCERT

13057 2021-10-04 10:15 cl.exe  

f508c9697bf14a187f2eb879739ac562


Generic Malware PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself 		1.8 M 34 ZeroCERT

13058 2021-10-04 10:15 artifact.exe  

c354ad2705debb7a270777acf1574597


Malicious Library PE64 PE File VirusTotal Malware RWX flags setting unpack itself ComputerName DNS 		1 1 3.6 M 53 ZeroCERT

13059 2021-10-04 10:17 toolspab2.exe  

fa37c09192e38254a4e80951f6f00642


Malicious Library AntiDebug AntiVM PE File PE32 Malware PDB Code Injection Checks debugger buffers extracted unpack itself Remote Code Execution 		6.2 ZeroCERT

13060 2021-10-04 10:18 det-088.exe  

af5aec64e95c21aaa7083c96ab1c417e


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows Cryptographic key 		14 16 2 9.4 24 ZeroCERT

13061 2021-10-04 10:19 hofile.exe  

6b40855b1ad38b1aeeefd7a6592370cf


Malicious Library PE File PE32 PDB unpack itself Remote Code Execution 		1.2 ZeroCERT

13062 2021-10-04 10:20 det-01.exe  

015d157c73a9a51f0a3745a028d3abce


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		10 13 1 10.8 44 ZeroCERT

13063 2021-10-04 10:21 chrome01.exe  

49caffd9e73d0b7aa19e9d905da8d7eb


Malicious Packer Malicious Library PE64 PE File VirusTotal Malware Code Injection buffers extracted 		2.8 M 21 ZeroCERT

13064 2021-10-04 10:23 det-099.exe  

079c2e1c486dbdfd4259afc0d51f432b


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows 		9 19 2 10.2 20 ZeroCERT

13065 2021-10-04 10:25 det-02.exe  

2c3831988e378295760ba378f37a0379


PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 19 2 8.0 28 ZeroCERT

keyword