popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13291 2021-10-08 11:26 file.exe  

db6a30fc47f61794d43ca50f0ac635fc


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 M 25 ZeroCERT

13292 2021-10-08 11:28 mx.exe  

9541217b4276268f9cf0e6e2f01a08e2


NSIS Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder ComputerName 		20 27 1 6 6.4 M 23 ZeroCERT

13293 2021-10-08 11:28 img-0878111036633.exe  

f058ec68a9f1649827914157c3e3b45a


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 2.8 M 13 ZeroCERT

13294 2021-10-08 11:28 BBN.exe  

b172b8e0bc46d457b39e4ac74e76e326


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		1.6 M 25 ZeroCERT

13295 2021-10-08 11:30 plt_107510013098613.exe  

fc1ac30e0bd33f65402eee320f49f829


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 3.4 M 42 ZeroCERT

13296 2021-10-08 11:30 vbc.exe  

b21fc6ad7e9aabcf73702889dc017f67


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		2.2 M 42 ZeroCERT

13297 2021-10-08 11:32 loader2.exe  

9ab5e8528c6928c400ec8f72d8f5bbd6


NSIS Malicious Library PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 11.0 M 33 ZeroCERT

13298 2021-10-08 11:33 jf.exe  

27e82e5a6ba22fd144a1aa0499ae1acd


NSIS Malicious Library PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		4 9 1 1 5.8 M 24 ZeroCERT

13299 2021-10-08 11:35 stealler.exe  

c241b933feb0df373ff34dafece3027b


Generic Malware Themida Packer PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Firmware DNS Cryptographic key crashed 		1 6.4 M 27 ZeroCERT

13300 2021-10-08 11:35 wap-01.exe  

ea7b66c47877294f9390eb621963295b


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		12 15 1 2 9.4 M 20 ZeroCERT

13301 2021-10-08 11:36 rollerkind.exe  

13125b46122981864bd9f93b018ff04a


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 M 19 ZeroCERT

13302 2021-10-08 11:37 SteamWebHelper.exe  

2db0b5a09292133e794322cb14639b2c


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware AutoRuns PDB Creates executable files unpack itself AppData folder Windows Remote Code Execution 		3.6 M 27 ZeroCERT

13303 2021-10-08 11:39 bro.exe  

cfbd1a2cbc6b71ecb11b80ddf05db117


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 M 26 ZeroCERT

13304 2021-10-08 11:39 QTL076213000008.exe  

70eeaeae5a9624ca4fbaaef91d2adfdb


RAT Generic Malware Antivirus PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 4 1 5.8 M 16 ZeroCERT

13305 2021-10-08 11:41 windows.exe  

a1a6e9d23d017f11193700753a10b6cc


Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.0 M 30 ZeroCERT

keyword