popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13156 2021-10-06 13:35 1371356488.exe  

5bec43789401e42ce38a1125f88c7b69


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 51 ZeroCERT

13157 2021-10-06 13:35 sWpkHYi_300.exe  

2230be98a60b2f788f674d605cc79ef0


Emotet Malicious Library UPX DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PE File PE32 OS Proc Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces AppData folder malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 6 1 17.4 M 30 ZeroCERT

13158 2021-10-06 13:37 bde.exe  

f11c1ffa48aefa8ac955c60a6803f8fa


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		13.2 M 27 ZeroCERT

13159 2021-10-06 13:37 zadyx2  

b432169dc62064aa3385131ea315d914


Emotet Gen2 Gen1 Malicious Packer Malicious Library PE File PE32 OS Processor Check DLL Dridex TrickBot Malware suspicious privilege MachineGuid Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces Kovter ComputerName DNS crashed 		1 4 2 6.4 M ZeroCERT

13160 2021-10-06 13:39 vbc.exe  

8f74ae82d335ca3c3efc39a022409b42


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		10.2 M 23 ZeroCERT

13161 2021-10-06 13:39 vbc.exe  

c0724a5c274680516eee8e6ce502bcbe


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		11.6 M 37 ZeroCERT

13162 2021-10-06 13:41 BUSINESS%20FILES.exe  

7e360ceb5c5948199b7a9528909e94b5


Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 24 ZeroCERT

13163 2021-10-06 13:44 1906116528.exe  

3ab2c790255aaeb328042c08a8ded716


RAT Gen1 Generic Malware Malicious Library ASPack UPX Antivirus Anti_VM Malicious Packer Admin Tool (Sysinternals etc ...) DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API St VirusTotal Malware powershell AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows ComputerName Remote Code Execution Cryptographic key crashed 		9.2 M 38 ZeroCERT

13164 2021-10-06 13:44 zadyx10  

b27c665494363d5cb723353cfcce7574


Emotet Gen2 Gen1 Malicious Packer Malicious Library PE File PE32 OS Processor Check DLL Dridex TrickBot Malware suspicious privilege MachineGuid Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces Kovter ComputerName DNS crashed 		2 5 2 1 5.0 M ZeroCERT

13165 2021-10-06 13:45 for.exe  

ee38cbd21dd2171fdeae3beecd05a113


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		8 16 2 8 7.2 M ZeroCERT

13166 2021-10-06 13:46 arab.exe  

360fe2af76dc3faffa92b6f8cdd201a2


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.0 M ZeroCERT

13167 2021-10-06 13:46 2145457315.exe  

ee98c1f6708926a136a805fa80652733


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		1 9.8 M 42 ZeroCERT

13168 2021-10-06 13:48 1831612761.exe  

66cf057af6a7014d593b3afc35ea9a6a


RAT PWS .NET framework Generic Malware PE File PE32 OS Processor Check .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.8 M 46 ZeroCERT

13169 2021-10-06 13:50 .winlogon.exe  

0518bf639cc856d129f734a20b6ec573


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		11.6 M 40 ZeroCERT

13170 2021-10-06 13:50 http://suriyecastajanslari.byk...  

3c4bb0d8ea06d2b95ee937a82a860d69


Generic Malware UPX Anti_VM AntiDebug AntiVM PE File PE32 .NET EXE Malware download VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed Downloader 		2 2 4.8 M guest

keyword