popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13426 2021-10-12 10:27 .rundll32.exe  

c0e5a274d66774418c9bf4e813c89c4a


PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		4 6 13.0 M 23 ZeroCERT

13427 2021-10-12 10:31 vbc.exe  

f8ba5db8bad75222081bc6b9297126a4


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		17 33 2 1 5.8 M 24 ZeroCERT

13428 2021-10-12 10:31 sl7.exe  

fd39db32feeef52113caa2c006e1e04e


Malicious Library PE File PE32 VirusTotal Malware PDB unpack itself 		2.6 M 51 ZeroCERT

13429 2021-10-12 10:34 templezx.exe  

d888198eb60c6c80d039ae12adb1e86f


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 12.4 M 19 ZeroCERT

13430 2021-10-12 10:37 system.exe  

5d816026f283ad04417b9ec38a29de81


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee DNS 		13 27 4 2 9.0 M 27 ZeroCERT

13431 2021-10-12 10:38 dyno.exe  

8fb7b0d584386defa56169e341f6ee64


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		1.8 M 10 ZeroCERT

13432 2021-10-12 10:41 vbc.exe  

c0eb90010d882e33340c40bde08474cb


NSIS Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		14 29 1 6.4 M 29 ZeroCERT

13433 2021-10-12 10:47 HGF_093876533679-09876535678.e...  

8e674224762af6cc955b9d3c7c068cd3


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS crashed 		2 1 15.4 30 ZeroCERT

13434 2021-10-12 10:56 HWL~0009484744-0498748944.exe  

c50aaf4127d885495ad3aa6d8b167931


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 15.2 32 ZeroCERT

13435 2021-10-12 10:56 AMC P.O1082021.JPG.scr  

9a4a8643db95a8c0fe52af8675a5d1b1


Generic Malware Malicious Library Malicious Packer DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		2 1 14.6 35 ZeroCERT

13436 2021-10-12 10:57 IM~0020298762542567TG.exe  

acda37bfd9f06bcde95dc9939ff6e765


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		12.2 30 ZeroCERT

13437 2021-10-12 10:57 Ikm~0020298762542567SD.exe  

acda37bfd9f06bcde95dc9939ff6e765


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS crashed 		2 1 14.8 30 ZeroCERT

13438 2021-10-12 10:59 NEW ORDER EXPO_51052 IMG002398...  

39eb239744f692d451e934fd467f02c0


Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 1 16.4 ZeroCERT

13439 2021-10-12 10:59 Ponuda.exe  

5cc35185a46c641109924dad40ebedc8


RAT AgentTesla(IN) Generic Malware Antivirus Malicious Packer UPX Malicious Library DNS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		2 1 15.4 ZeroCERT

13440 2021-10-12 11:02 PROFORMA INVOICE. P.O.exe  

8f0c65d388502f0a9825f4bf5b9c7e7a


Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 1 16.0 ZeroCERT

keyword