popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13381 2021-10-11 10:29 lv.exe  

91b1dc3f70f739111bfa2b2e42ea30b5


Gen1 Gen2 Themida Packer Generic Malware Malicious Library Anti_VM Malicious Packer PE File PE32 DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself Checks Bios Detects VMWare AppData folder VMware anti-virtualization Windows Firmware crashed 		7.0 M 53 ZeroCERT

13382 2021-10-11 10:31 lis-01.exe  

8279edc14cc42685f7fceefe384ddf0d


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		8.4 M 36 ZeroCERT

13383 2021-10-11 15:40 asdfasdfasdfasdfasdfasdfasdfas...  

2a600aaf4954388f5ad11abba8f8c351


RAT Generic Malware Malicious Library PE64 PE File PE32 OS Processor Check VirusTotal Malware MachineGuid Check memory Checks debugger Creates executable files ICMP traffic unpack itself Tofsee DNS crashed 		2 3 4.0 9 ZeroCERT

13384 2021-10-11 15:50 doc-1427846338.xls  

ec95f43035b619c9374c932e5c757cf2


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 5 2 3.6 guest

13385 2021-10-11 15:52 doc-1427925674.xls  

c7485eb16b88c257ac69ece7e0c17a93


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 5 2 3.6 guest

13386 2021-10-11 15:54 doc-1428955211.xls  

03b2713c7f9d51bd6404cfcea20b127a


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 5 2 3.6 guest

13387 2021-10-12 09:26 ID_0398765346378-3098746739767...  

bcd7995ce0e59de03845fb9b5cdc5eee


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 16.8 21 ZeroCERT

13388 2021-10-12 09:26 AMC P.O1082021.jpg.scr  

6a4e9c8b6e38bab16622b8d26164b3fd


Generic Malware Malicious Library Malicious Packer DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		3 1 17.4 45 ZeroCERT

13389 2021-10-12 09:27 ORL49357390844.JPG.scr  

d8abec927aa5885f549ad9c5d83e09c3


Generic Malware Malicious Library PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows Remote Code Execution crashed 		5.6 44 ZeroCERT

13390 2021-10-12 09:27 Purchase Order.exe  

f03b9597f173e572809be641e0e83c55


PWS .NET framework NPKI Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS DDNS 		3 1 12.8 22 ZeroCERT

13391 2021-10-12 09:30 Quotation usd pdf.exe  

25d4ce2fc9f3bb502ddf88a0d46cdd2b


PWS .NET framework NPKI Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 1 15.0 ZeroCERT

13392 2021-10-12 09:30 SRE2021.34935374.JPG.scr  

dd663bb6a23cd47928fcd9e34ddb98e3


Generic Malware Malicious Library Malicious Packer DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		3 1 16.2 34 ZeroCERT

13393 2021-10-12 09:32 AnnualXretirementXplan.5425456...  

18662d6c1cc7c38c848608ff1a22964f


Excel Binary Workbook file format(xlsb) VirusTotal Malware MachineGuid Check memory Checks debugger WMI RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		5.0 5 ZeroCERT

13394 2021-10-12 09:32 PO-08YGK.pdf  

4bcd422bbc3db021a18e1298bf1577d7


PDF unpack itself Windows utilities Windows 		1.4 ZeroCERT

13395 2021-10-12 09:49 System-Solution-Aldehad-Projec...  

3a89764bbd823da3c227f839f05ecd25


UPX Malicious Library PE File PE32 VirusTotal Malware 		0.8 19 ZeroCERT

keyword