popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13171 2021-10-06 13:53 vbc.exe  

8f48ae7e6330a607031c4d7ac6ebef2d


RAT Generic Malware Admin Tool (Sysinternals etc ...) Antivirus AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware powershell PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process Windows ComputerName DNS Cryptographic key 		2 6 2 11.6 M 30 ZeroCERT

13172 2021-10-06 13:55 syz.exe  

900b1c9abbab7a08f9f89b8e12fd2750


PWS .NET framework email stealer Generic Malware DNS Socket Escalate priviledges KeyLogger Code injection Downloader persistence AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS DDNS crashed 		2 1 11.6 M 28 ZeroCERT

13173 2021-10-06 13:56 vbc.exe  

790abe77329f408bb3cd8782d0592be0


Gen2 Emotet Gen1 NSIS Generic Malware Malicious Library ASPack Malicious Packer UPX Admin Tool (Sysinternals etc ...) Anti_VM PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Windows Browser 		22 25 1 10 6.2 M 63 ZeroCERT

13174 2021-10-06 13:57 507913557.exe  

99f51633e0f6419c6310a9e08d3626a1


Generic Malware Malicious Library Antivirus PE64 PE File GIF Format VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities powershell.exe wrote suspicious process AntiVM_Disk sandbox evasion WriteConsoleW Firewall state off VM Disk Size Check Tofsee Windows ComputerName Cryptographic key 		2 4 2 10.8 M 38 ZeroCERT

13175 2021-10-06 14:28 Update of the OFFICE PACK.doc  

614679aaac8791504e5885c9c4e97b58


RTF File doc VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting DNS 		1 1 4.4 M 33 ZeroCERT

13176 2021-10-06 14:36 microsoftExcelEarth.jpg  

b724179ecfdd640b5b9d8cf902cbb820


Emotet Gen2 Gen1 Malicious Packer Malicious Library PE File PE32 OS Processor Check DLL Dridex TrickBot VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces Kovter ComputerName DNS crashed 		1 4 2 5.4 8 ZeroCERT

13177 2021-10-06 14:39 bleh.ppt  

f0da0a10cdf0e66706034fd14f70b06f


VBA_macro Generic Malware Antivirus AntiDebug AntiVM MSOffice File PNG Format VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Interception Windows ComputerName Cryptographic key 		11 8 1 8.4 19 ZeroCERT

13178 2021-10-06 14:57 https://kyahogysammajhnailagra...  

0f41820986333d27198258a02927fc1c


Antivirus AntiDebug AntiVM PNG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		34 18 1 4.2 ZeroCERT

13179 2021-10-06 15:54 1005_1662882485744.doc  

1d1284db499feb490f85a3f99463a267


VBA_macro Generic Malware MSOffice File Vulnerability unpack itself 		2.2 Kim.GS

13180 2021-10-06 16:14 1005_1662882485744.doc  

1d1284db499feb490f85a3f99463a267


VBA_macro Generic Malware MSOffice File RWX flags setting unpack itself 		2.0 ZeroCERT

13181 2021-10-06 17:56 lpe.exe  

1df4ccb14d198d81a2ba8a053cf3626a


Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 23 ZeroCERT

13182 2021-10-06 17:56 vbc.exe  

d27baa5536590d60f3c183d6aa0b9ddb


NSIS Malicious Library PE File PE32 OS Processor Check DLL VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder human activity check Windows ComputerName 		2 9.6 18 ZeroCERT

13183 2021-10-06 17:59 Update.exe  

d85e65af9f95ec441918502621be13b4


UltraVNC Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Windows ComputerName Cryptographic key crashed 		1 2 4.8 M 42 ZeroCERT

13184 2021-10-06 18:16 doc-144430402.xls  

8e7e1a9a754cdaf05c7969966d6ab878


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 5 2 4.0 guest

13185 2021-10-06 18:18 doc-1444048942.xls  

fcb53e0a9e6f45288b263a0145f9d74b


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		5 5 2 2 4.0 guest

keyword