popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13096 2021-10-05 09:42 arioriginlogg.exe  

964ecfcb2d909a8d942058e28bf621a3


AgentTesla(IN) Generic Malware Malicious Packer UPX Malicious Library PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.4 M 48 ZeroCERT

13097 2021-10-05 09:45 vbc.exe  

d0a5f37532a8e86b5790e628193c1bd2


Loki PWS Loki[b] Loki.m .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 13.2 M 31 ZeroCERT

13098 2021-10-05 09:45 vbc.exe  

189b5fb512ac70ee220a527a22ab0950


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.4 13 ZeroCERT

13099 2021-10-05 09:47 winxplorer.exe  

1b68afffad286bd909572d959b9a2e5c


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		1 4 1 2.2 19 ZeroCERT

13100 2021-10-05 09:47 ugopoundzx.exe  

1454d63297f54fac97a7cc7d69cfaf2c


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 12.4 17 ZeroCERT

13101 2021-10-05 09:50 bin.exe  

e78a8c49a3846c8224702bdfe143d6b9


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		7 17 1 1 9.6 M 27 ZeroCERT

13102 2021-10-05 09:51 updata.exe  

505ce88a771d4e5a65dac0d3f1a83757


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee 		1 4 1 2.2 14 ZeroCERT

13103 2021-10-05 09:51 RunPE.dll  

d3bc492a710280c56d5d77c8438e179c


RAT Generic Malware Malicious Packer PE File .NET DLL DLL PE32 PDB 		0.4 ZeroCERT

13104 2021-10-05 09:55 shakitizx.exe  

6400dc23f9782463ff5777f866aa67d8


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself ComputerName crashed 		2.4 M 15 ZeroCERT

13105 2021-10-05 09:55 vbc.exe  

5a320540eeef00b5020c8dd42557ab2f


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 41 ZeroCERT

13106 2021-10-05 09:57 mexz.exe  

b0fdc1d5d662600356931895750433e3


NSIS Malicious Library PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		9.4 M 37 ZeroCERT

13107 2021-10-05 09:57 vbc.exe  

013d4cb9c83ba31bfb0c9041f565acbb


UPX PE File PE32 VirusTotal Malware Remote Code Execution 		1.0 M 26 ZeroCERT

13108 2021-10-05 09:59 abx.exe  

72e7c1c354f2680beb148df6723b10ed


NSIS Malicious Library PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		9.6 M 41 ZeroCERT

13109 2021-10-05 09:59 VAL.exe  

bba5e41c8053bbd991b08057036666a4


AgentTesla(IN) RAT Generic Malware Malicious Packer UPX Malicious Library PE File .NET EXE PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key crashed 		5.0 M 36 ZeroCERT

13110 2021-10-05 10:01 vbc.exe  

cb1aa8895db7b5598823e583102f9fc6


Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 20 ZeroCERT

keyword