popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13081 2023-05-22 16:19 Satan_AIO.exe  

c8c82a0f0ee038fddb54cbf156f2e300


Malicious Library Malicious Packer VMProtect PE64 PE File VirusTotal Malware Checks debugger DNS crashed 		1 3.0 30 ZeroCERT

13082 2023-05-22 16:19 WindowsApp6.exe  

5681f190a1d7c696efa487fa0100e96b


Formbook .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 5.0 M 59 ZeroCERT

13083 2023-05-22 16:18 jawazx.exe  

0cf0d018debfce1695e34759289e31db


AgentTesla PWS .NET framework browser info stealer Google Chrome User Data Downloader Create Service Socket DNS PWS[m] Sniff Audio Internet API Escalate priviledges KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Remcos VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS keylogger 		1 3 1 10.4 41 ZeroCERT

13084 2023-05-22 16:17 xmrig32.exe  

cc20a54b21aac972382d5ad53f67e91b


Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE File PE32 VirusTotal Malware WriteConsoleW 		1.4 59 ZeroCERT

13085 2023-05-22 09:09 goat.dll  

78b53767df514a3d25aed7b2befbf562


UPX Malicious Library OS Processor Check DLL PE64 PE File Checks debugger unpack itself ComputerName DNS crashed 		5 3.8 ZeroCERT

13086 2023-05-22 09:04 Updates%20Windows.exe  

05ea0aa586cd127894ff0bd65566254c


Loki_b Loki_m PWS .NET framework RAT UPX Code injection PWS[m] AntiDebug AntiVM OS Processor Check .NET EXE PE File PE32 VirusTotal Malware Telegram AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows ComputerName DNS Cryptographic key crashed 		3 5 4 12.6 M 50 ZeroCERT

13087 2023-05-22 09:03 ilillil%23%23%23%23%23%23%23%2...  

f83050a49383b5c615b9a84543254f4e


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash Exploit DNS crashed Downloader 		1 1 3 4.4 M 28 ZeroCERT

13088 2023-05-22 09:02 whiteezx.exe  

2608ea96bd6424120c20e6594827f844


Formbook PWS .NET framework Anti_VM AntiDebug AntiVM .NET EXE PE File PE32 FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 4 1 9.6 M 52 ZeroCERT

13089 2023-05-22 08:59 ne983n8sn3lks3.exe  

a96ac42f9ccc7d11663f2741d5dfe930


BlackMatter Ransomware PE File PE32 VirusTotal Malware unpack itself 		2.2 M 57 ZeroCERT

13090 2023-05-22 08:57 dollzx.exe  

c38d1fa73b3535dda6bae5e604f88143


SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 2 1 13.0 M 49 ZeroCERT

13091 2023-05-22 08:55 vbc.exe  

d0e186f273092a0c6a005cd1c46555bc


Loki Loki_b Loki_m Formbook DNS PWS[m] AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.8 M 52 ZeroCERT

13092 2023-05-22 08:53 philipzx.exe  

d7ea3fda5afa8b48c063216fdbc0c1a3


RedLine stealer[m] PWS .NET framework PWS[m] Anti_VM BitCoin AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 13.0 M 48 ZeroCERT

13093 2023-05-22 08:53 vbc.exe  

67600a2cf6e129d8883d76799561df02


PWS .NET framework RAT Generic Malware Antivirus SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Telegram suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 4 15.0 M 43 ZeroCERT

13094 2023-05-22 08:53 Inv(05-19)Copy#18-54-15.js  

89cde9b78c827ce1e542fddcdafce3a9

VirusTotal Malware VBScript wscript.exe payload download unpack itself Tofsee crashed Dropper 		1 2 2 10.0 2 ZeroCERT

13095 2023-05-22 08:51 obizx.exe  

ac23a0048ca9e25149a3651cf9688e31


PWS .NET framework Formbook PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 2 1 13.4 M 48 ZeroCERT

keyword