popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13126 2021-10-05 16:47 image.mp3.html  

0f8e7f27b8db9e95ae4f6c28f412d847


VirusTotal Malware 		0.4 3 ZeroCERT

13127 2021-10-05 16:52 RFQOG051021,PDF.exe  

29a2ea2de2e06ff44e764795c83fbba7


NSIS Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder DNS 		8 20 3 6.6 23 ZeroCERT

13128 2021-10-05 16:53 image.mp3.html  

0f8e7f27b8db9e95ae4f6c28f412d847


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 5.2 3 ZeroCERT

13129 2021-10-05 16:55 1796250310-10042021.xls  

1f4a448f535f2a3657dfef39beb4a662


VBA_macro Generic Malware Downloader MSOffice File VirusTotal Malware Malicious Traffic RWX flags setting unpack itself suspicious process DNS 		3 3 5.2 6 ZeroCERT

13130 2021-10-05 17:44 DOC20211005-0918629831.exe  

83a32d0d136cadf943aa605a7b1e3dc0


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Cryptographic key crashed 		15 29 2 10.0 18 ZeroCERT

13131 2021-10-05 17:48 rundll32.exe  

1d6ee7c0d6d827f3d7ce131fd2c69d5d


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 4 1 8.0 M 18 ZeroCERT

13132 2021-10-05 17:50 config.exe  

ce2434f1e7cf62fb10e62123e59fb335


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee DNS 		1 5 1 3.8 12 ZeroCERT

13133 2021-10-05 17:52 vbc.exe  

d41f65d9b8b141d40387320ce54f9ac3


NSIS Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		24 26 1 6.2 M 26 ZeroCERT

13134 2021-10-05 17:52 cxl.exe  

f51da2ac8cdfc1ff41921f0fceee4514


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		8 22 2 5.8 M 26 ZeroCERT

13135 2021-10-05 17:52 vbc.exe  

82878be02fe6a67ed47a89dac51640ca


NSIS Malicious Library PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 11.4 M 30 ZeroCERT

13136 2021-10-05 17:52 vbc.exe  

054b8ad69f868fa172c8c46c735b5dbe


Loki PWS Loki[b] Loki.m .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 1 12.2 M 9 ZeroCERT

13137 2021-10-05 17:54 jo.exe  

72ac15be91b759522fb1e874bb049ed6


NSIS Malicious Library PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		9.4 M 35 ZeroCERT

13138 2021-10-05 17:56 eflyairplane.png  

c3e61b2bd99de2bc800e680eed9eaa75


Emotet Gen1 Malicious Library AntiDebug AntiVM PE File PE32 OS Processor Check Dridex TrickBot Malware Report suspicious privilege MachineGuid Code Injection Malicious Traffic buffers extracted ICMP traffic RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check Kovter ComputerName DNS crashed 		8 7 6 11.8 ZeroCERT

13139 2021-10-05 17:57 intel.exe  

47c116db3f0e5d536352aaecbbc7d6b6


Malicious Library PE File PE32 VirusTotal Malware Report Check memory Creates executable files RWX flags setting unpack itself AppData folder sandbox evasion Browser DNS crashed 		3 1 6.2 M 60 ZeroCERT

13140 2021-10-05 17:57 jfb.exe  

f858612dba7ed5eabd87e508083c34f5


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		4 8 1 6.0 M 35 ZeroCERT

keyword