popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13306 2021-10-08 11:41 QPL_112075000351102.exe  

c82829f407ca969d3553bf5bb86fdb38


RAT Generic Malware Antivirus PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 4 1 5.8 M 14 ZeroCERT

13307 2021-10-08 11:43 qpl-075091120003.exe  

ac6fda43023f6764756838ae94fd4582


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 3.2 M 32 ZeroCERT

13308 2021-10-08 11:44 wap-02.exe  

ca7b5f2ec232fadefa0af01ae3cba9be


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows 		6 6 1 11.0 M 15 ZeroCERT

13309 2021-10-08 11:48 vbc.exe  

1e600b33bd5e1420472158c1b2e145a5


Admin Tool (Sysinternals etc ...) UPX Malicious Library PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Tofsee Windows Remote Code Execution crashed 		22 25 3 2 9.2 M 29 ZeroCERT

13310 2021-10-08 11:49 HCX.exe  

9e77fbb6117c67df73060a9f34bbf85c


AgentTesla RAT PWS .NET framework browser info stealer Generic Malware Google Chrome User Data DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2 Malware download Remcos NetWireRC VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities WriteConsoleW Windows RAT keylogger 		3 1 11.6 M 20 ZeroCERT

13311 2021-10-08 11:49 wap.exe  

6c63918b39ec12855131ee16f7806daa


NPKI Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		14 18 1 4 7.8 M 16 ZeroCERT

13312 2021-10-08 11:50 server9.exe  

bb5b3ca8658a2f79c23c326025d1f358


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		1 2 1 3.4 M 43 ZeroCERT

13313 2021-10-08 11:50 bin-crypting.exe  

8720826b89bda1dafa5ba5468f67efa4


RAT Generic Malware AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Remote Code Execution 		9 17 1 8.8 M 16 ZeroCERT

13314 2021-10-08 11:51 .lsass.exe  

6d76b11c350623bb258c91e084915ede


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process AppData folder WriteConsoleW VMware anti-virtualization Windows ComputerName DNS Software 		3 7 1 15.6 M 40 ZeroCERT

13315 2021-10-08 11:53 obizx.exe  

5ed8f58873e6537bc9a5bd97d18425b9


NPKI Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 5 1 7.4 M 18 ZeroCERT

13316 2021-10-08 11:54 Code_of_Conduct_2021.doc  

8d1454096bc0e82042437d911d695a2c


Malicious Packer MSOffice File Vulnerability unpack itself 		1.8 M ZeroCERT

13317 2021-10-08 11:54 fn.exe  

94289a2eedf546dd9dc0624908d1dfba


UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself AppData folder Windows crashed 		3.6 M 25 ZeroCERT

13318 2021-10-08 11:55 vbc.exe  

f022b6feca056d1c00e697fdd3f32ee5


Admin Tool (Sysinternals etc ...) UPX Malicious Library PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Tofsee Windows Remote Code Execution crashed 		25 26 3 9.4 M 19 ZeroCERT

13319 2021-10-08 11:56 fresh.exe  

e38c19075b263d583cfd967a1681dc87


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		1.6 M 21 ZeroCERT

13320 2021-10-08 11:57 EXCEL.exe  

6422332249a3e867bb8ac8f3c6fb654f


Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware MachineGuid Checks debugger unpack itself 		2.0 M 11 ZeroCERT

keyword