popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13141 2021-10-05 17:59 mo.exe  

056200319751e3b276a22f27bd1149f0


NSIS Malicious Library PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		9.2 M 23 ZeroCERT

13142 2021-10-05 17:59 esmallruby.png  

27b1967b1a15a26dbdc9863068c44799


Malicious Library PE File PE32 OS Processor Check Dridex TrickBot Malware suspicious privilege buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		6 1 6.8 M ZeroCERT

13143 2021-10-05 18:01 vbc.exe  

c3e9c249becb24a345309463006d9d72


Loki NSIS Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 3 10 1 10.6 M 25 ZeroCERT

13144 2021-10-05 18:05 mxo.exe  

7e17686d4ba718b453ca93634c1c91ee


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		22 26 2 6.2 M 29 ZeroCERT

13145 2021-10-05 18:06 nf.exe  

e007d4f9bcd9d51aff452fa92631fb93


NSIS Malicious Library PE File PE32 DLL VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder human activity check Windows ComputerName DNS DDNS 		2 1 11.6 M 36 ZeroCERT

13146 2021-10-06 13:23 BUSINESS%20FILES.exe  

7e360ceb5c5948199b7a9528909e94b5


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName 		2 5 1 11.0 M 24 ZeroCERT

13147 2021-10-06 13:26 aeopmguywjffmigwnfbefrvgqg.exe  

06d3c19201d5c4fd9d069605dd46c514


Generic Malware DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API ScreenShot Http API Downloader persistence AntiDebug AntiVM PE File PE32 .NET EXE DarkComet VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process Windows DNS DDNS keylogger 		3 13.0 M 31 ZeroCERT

13148 2021-10-06 13:27 Build18_1950eu.exe  

5f251ddf1f41eb3ccc330508f173152a


Gen1 Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 OS Processor Check DLL Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check Stealer Windows Browser Email ComputerName DNS 		8 1 5 11.8 M 42 ZeroCERT

13149 2021-10-06 13:28 VmvadDHPESlhU8X.exe  

3f3aeea5e1ee0c4d28f32e77b4eb2ff0


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		10.6 M 19 ZeroCERT

13150 2021-10-06 13:28 946792219.exe  

61f9521aba6003796e3e2544dfdb2596


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.8 M 47 ZeroCERT

13151 2021-10-06 13:30 398562008.exe  

e7c85909bd98c3b3d5b1cd85f55023dc


Malicious Library PE File PE32 OS Processor Check JPEG Format VirusTotal Malware PDB Creates executable files unpack itself AntiVM_Disk VM Disk Size Check Remote Code Execution 		4.0 M 28 ZeroCERT

13152 2021-10-06 13:31 new.exe  

3c4bb0d8ea06d2b95ee937a82a860d69


Generic Malware UPX Anti_VM PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Remote Code Execution Firmware DNS Cryptographic key crashed 		1 7.6 47 guest

13153 2021-10-06 13:32 852188550.exe  

26ac6f38b111522b7802b03d1fa93e5f


Malicious Library AntiDebug AntiVM PE File PE32 OS Processor Check JPEG Format VirusTotal Malware Buffer PE PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Windows Remote Code Execution DNS Cryptographic key 		1 10.8 M 26 ZeroCERT

13154 2021-10-06 13:32 1629822095.exe  

049ae3aa2c71389246c85aa2013b6357


RAT PWS .NET framework Generic Malware PE File PE32 OS Processor Check .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.6 M 35 ZeroCERT

13155 2021-10-06 13:34 gyty.wbk  

9f33914979fc685f81ab79066877d01c


RTF File doc AntiDebug AntiVM FormBook Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself suspicious TLD Windows Exploit DNS crashed Downloader 		28 28 11 2 5.8 M 27 ZeroCERT

keyword