popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13186 2021-10-06 18:20 doc-1445313213.xls  

cf0908b4d734a5e78588b73410a25a3a


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		5 5 2 2 4.0 guest

13187 2021-10-07 09:17 fd.wbk  

6ce9da18e576af395cf59dd98ec43ea1


Lokibot RTF File doc AntiDebug AntiVM LokiBot Malware download VirusTotal Malware c&c MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS Cryptographic key crashed Downloader 		2 3 13 1 5.6 M 27 ZeroCERT

13188 2021-10-07 09:32 vbc.exe  

40cdcc9d27361a0721fc24e5a74107ed


Lokibot PWS Loki[b] Loki.m Generic Malware DNS Socket AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 1 12.6 M 24 ZeroCERT

13189 2021-10-07 10:53 egsoft.exe  

fae9f9b8491a6b3bf60a63b10290f4c4


RAT AgentTesla(IN) Generic Malware Malicious Packer UPX Malicious Library PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		8.0 M 46 ZeroCERT

13190 2021-10-07 10:55 rer-0.exe  

76f67f41dc9f6809977866b724424c87


Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		16 19 2 14 8.4 M 27 ZeroCERT

13191 2021-10-07 10:55 predismzx.exe  

0201b32e81d74909c85df1354dda706c


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself 		7.2 M 24 ZeroCERT

13192 2021-10-07 10:56 documentk.exe  

1797df3d5611c8edee16bba956eea44f


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.2 M 36 ZeroCERT

13193 2021-10-07 10:58 haitianzx.exe  

694bfd7e3c03e08e4cdd7cd7318f1d06


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 M 21 ZeroCERT

13194 2021-10-07 10:58 tempzx.exe  

4f95aa292f894da510a3dbb5c072e110


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 6 5 13.4 M 39 ZeroCERT

13195 2021-10-07 11:00 hussanzx.exe  

f9923769fbfc6e53e114b6a862e8882f


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 15.0 M 42 ZeroCERT

13196 2021-10-07 11:00 rundll32.exe  

9613b774d57281142329a01e031b8e34


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 7.8 M 14 ZeroCERT

13197 2021-10-07 11:02 vbc.exe  

da19a523623dccfc4592bdc4c774e914


RAT Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.8 M 38 ZeroCERT

13198 2021-10-07 11:04 obn.exe  

d343d044f30fcbd7c0cb9b3a6fd53123


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		10.4 M 33 ZeroCERT

13199 2021-10-07 11:05 mtz_ami_vyber.exe  

b9b0a03d3102e82d508253665b5c1ccd


Emotet RAT Gen1 Malicious Library UPX PE File PE32 OS Processor Check PE64 VirusTotal Malware Check memory Checks debugger unpack itself AppData folder AntiVM_Disk VM Disk Size Check human activity check ComputerName 		3.4 11 ZeroCERT

13200 2021-10-07 11:05 bluezx.exe  

01f516207e77d9bccbadfd9d5deee8a6


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 16.0 M 24 ZeroCERT

keyword