popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13411 2023-05-09 11:01 vbc.exe  

34fbc7022384a5377bd9b728f7e35ee8


Generic Malware UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself 		2.2 M 49 r0d

13412 2023-05-09 09:21 vbc.exe  

743a03da4bca80da5f49be2b77050225


Formbook NSIS UPX Malicious Library PE32 PE File DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		21 24 2 19 5.0 M 41 ZeroCERT

13413 2023-05-09 09:11 fotocr23.exe  

9a5f630ba99d3ee7e838d5c9abac233e


Gen1 Emotet PWS .NET framework RAT UltraVNC UPX Malicious Library Malicious Packer Confuser .NET CAB PE32 PE File OS Processor Check .NET EXE AutoRuns PDB suspicious privilege Check memory Checks debugger Creates executable files unpack itself Disables Windows Security AppData folder AntiVM_Disk VM Disk Size Check Windows Update Remote Code Execution DNS Cryptographic key crashed 		2 7.0 M ZeroCERT

13414 2023-05-09 09:11 123.exe  

2aeac863392c9a2a31058c6d5eeb4cc2


PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download VirusTotal Malware RecordBreaker PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications installed browsers check Stealer Windows Browser DNS 		9 1 5 11.4 M 28 ZeroCERT

13415 2023-05-09 09:11 foto0174.exe  

1b1b1239c10dcd01f551df6cee30d4e2


Gen1 Emotet UPX Malicious Library Admin Tool (Sysinternals etc ...) Malicious Packer CAB PE32 PE File OS Processor Check DLL Browser Info Stealer Malware download Amadey FTP Client Info Stealer Malware AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Update Browser ComputerName Remote Code Execution DNS Cryptographic key Software crashed 		4 2 6 3 16.0 M ZeroCERT

13416 2023-05-09 09:09 vbc.exe  

34fbc7022384a5377bd9b728f7e35ee8


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself 		2.2 M 47 ZeroCERT

13417 2023-05-09 09:09 vbc.exe  

e47e3bd985effc1d1352ac832a09da14


Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 7 14.4 M 41 ZeroCERT

13418 2023-05-09 09:05 009.jpg  

baa51dc77e43c436c429a9131ce4b152


Malicious Library PE32 PE File VirusTotal Malware Check memory unpack itself suspicious TLD WriteConsoleW Interception Remote Code Execution 		1 3.4 59 ZeroCERT

13419 2023-05-09 09:04 zqqK.html  

5144480c0b8e79a016fafcfc3d3c3aa7

unpack itself crashed 		0.6 M ZeroCERT

13420 2023-05-09 09:03 instal6699_cr.exe  

eafe753a6fd3d7e298974135a34d565c


RedLine stealer[m] UPX Admin Tool (Sysinternals etc ...) PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 10.2 15 ZeroCERT

13421 2023-05-09 09:03 obi.exe  

f8001587bbb6e217b0f812e0e6e797d3


.NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself 		2.4 46 ZeroCERT

13422 2023-05-09 07:27 http://www.google.com/profiles...  

6395ac3078f4e5141fb41b72c27d5f3f


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 10 2 4.6 guest

13423 2023-05-09 07:27 http://www.google.com/profiles...  

027de6380a27d9116764f11da1b25b61


AntiDebug AntiVM MSOffice File icon VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		11 10 2 4.2 guest

13424 2023-05-09 06:50 http://www.google.com/profiles...  

faf06d1d50c4dcb652d72a25485883e8


Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 10 2 4.6 guest

13425 2023-05-09 04:33 chatverlauf jasmin.txt  

ca29b214d1a9a341e9d3c82b3f5f490b


ScreenShot AntiDebug AntiVM Check memory unpack itself 		1.0 guest

keyword