popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13351 2021-10-08 17:29 REVISED PURCHASE ORDER.exe  

020f8ee721322add5d0305a08bc865e2


RAT PWS .NET framework Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		2 1 15.6 ZeroCERT

13352 2021-10-08 17:29 SWJ7380000239.PNG.scr  

1d6c6ebc1c567d6c7e73a2fe7c04bdad


Generic Malware Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		3 1 16.2 33 ZeroCERT

13353 2021-10-08 17:35 TH8938545845904.JPG.scr  

77e7c359cd4b72b1698280b71f4ec5c8


Generic Malware Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Remote Code Execution crashed 		13.0 25 ZeroCERT

13354 2021-10-08 17:35 SWTR5376383393.JPG.scr  

fafe214c03f1e66da0aa8fbcf50cc6a6


Generic Malware Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		3 1 17.2 34 ZeroCERT

13355 2021-10-08 17:37 ZYH~09876543234567-987654567.e...  

2ccbb9c2db0f35ef80fbc7dd1f13411c


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 15.4 20 ZeroCERT

13356 2021-10-11 09:55 rundll32.exe  

f93fe182b5ec5a3a1e343110b1ca22a0


NSIS Malicious Library PE File PE32 OS Processor Check DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.4 31 ZeroCERT

13357 2021-10-11 09:55 rollerkind2.exe  

8513b0c431334c6c5c6bcb99f2546325


Malicious Library PE File PE32 OS Processor Check PDB unpack itself 		1.0 ZeroCERT

13358 2021-10-11 09:57 DS.exe  

facac9092fbd9878bd2b5a0bbc2d0055


Malicious Packer UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself AppData folder Windows crashed 		3.4 M 37 ZeroCERT

13359 2021-10-11 09:57 file.exe  

22dccb5bba83abd89502fafda108b0ce


Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself 		1.8 M 22 ZeroCERT

13360 2021-10-11 10:01 fm.exe  

f3cfacb645a896421d6f9083897e8887


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		11 26 2 1 5.8 M 21 ZeroCERT

13361 2021-10-11 10:01 96.exe  

ea800644b9dfd027807447fdd98241aa


RAT Generic Malware task schedule ASPack Malicious Packer Malicious Library Antivirus ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer Malware download FTP Client Info Stealer NetWireRC VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Tofsee DCRat Windows Browser ComputerName DNS Cryptographic key Software crashed 		10 3 2 20.4 M 20 ZeroCERT

13362 2021-10-11 10:02 BlueStacks.exe  

f3288557c97b978eb4a011de328ed93f


Generic Malware Malicious Library PE File PE32 OS Processor Check PDB unpack itself 		1.0 M ZeroCERT

13363 2021-10-11 10:05 lis-0.exe  

a6dc10d7c082142c47aea5e53463af8b


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		16 17 1 8 8.8 M 43 ZeroCERT

13364 2021-10-11 10:06 111.exe  

9b164a8d1003a08d50d8d282da9cde81


Malicious Packer Malicious Library PE64 PE File Malware Code Injection Malicious Traffic buffers extracted Tofsee DNS 		1 7 1 1 3.4 M ZeroCERT

13365 2021-10-11 10:08 bwmonitor.exe  

583ec7c5fb5616cf290f0f5ec21582d7


Emotet RAT Gen1 Generic Malware Themida Packer Malicious Library Antivirus Malicious Packer UPX AntiDebug AntiVM PE File PE32 OS Processor Check MSOffice File GIF Format .NET EXE PE64 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder AntiVM_Disk suspicious TLD VMware anti-virtualization VM Disk Size Check human activity check installed browsers check Tofsee Windows Exploit Browser ComputerName Firmware DNS Cryptographic key Software crashed 		3 5 1 15.4 M 18 ZeroCERT

keyword