popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13531 2021-10-14 09:53 1170423485.exe  

7171b247521e630152953ce57aa6908e


Malicious Packer PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 8.4 M 34 ZeroCERT

13532 2021-10-14 09:54 108.exe  

ea5d06ebac99fcea217fecc743c259f5


UPX Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 OS Processor Check PE64 Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed Downloader 		2 5 3 15.0 M 42 ZeroCERT

13533 2021-10-14 09:56 file.exe  

e1489864463ec55743b9663fb7084a96


UPX Malicious Library PE File PE32 OS Processor Check PDB unpack itself Remote Code Execution 		1.4 M ZeroCERT

13534 2021-10-14 09:58 e64v7wm.jpg  

1b9e338e3d92bda52862a729c6dbb9c6


Gen2 Gen1 Malicious Library PE File PE32 DLL PDB Check memory unpack itself crashed 		1.0 M ZeroCERT

13535 2021-10-14 10:00 ks2gtc2n.jpg  

ba80b5374b01f366c6055033059a7a17


Gen2 Gen1 Malicious Library PE File PE32 DLL VirusTotal Malware PDB Check memory unpack itself crashed 		1.4 M 9 ZeroCERT

13536 2021-10-14 10:03 vbc.exe  

a65b1815177ef9eba7e5e894bbf65a3c


Admin Tool (Sysinternals etc ...) UPX Malicious Library PE File PE32 VirusTotal Malware 		1.2 M 28 ZeroCERT

13537 2021-10-14 15:19 vbc.exe  

2292debf2685fda1410be586bd7d25b1


Admin Tool (Sysinternals etc ...) UPX Malicious Library PE File PE32 VirusTotal Malware 		1.0 M 16 ZeroCERT

13538 2021-10-14 15:20 Bank-Details.xlsx  

69edca098ec730f1aa9302c24923fcff


KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Malware download Vulnerability VirusTotal Malware MachineGuid Malicious Traffic Checks debugger buffers extracted exploit crash unpack itself Exploit DNS crashed Downloader 		1 1 2 1 5.6 M 18 guest

13539 2021-10-14 15:22 vbc.exe  

80c6546b0a2097556b4218e620c63853


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware DNS Socket AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software crashed 		1 2 6 1 13.2 M 22 ZeroCERT

13540 2021-10-14 15:23 vbc.exe  

31ce7d8522a4ee3ba72ed934e7ffd70b


NSIS UPX Malicious Library PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		21 24 2 13 7.4 M 34 ZeroCERT

13541 2021-10-14 15:35 rundll32.exe  

51dcc89ed1035a6c2fc57ada8dcb4dc2


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		10 13 2 9.2 11 ZeroCERT

13542 2021-10-14 15:36 vbc.exe  

ab92b4fd3e3524b4b238b23ce7eda0e8


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 .NET EXE Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee DNS crashed 		1 5 1 3.4 ZeroCERT

13543 2021-10-14 15:37 asdERTYgh56F.exe  

b866823e1f8f4a52376bd108c457dd78


Gen2 Gen1 Generic Malware UPX Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process sandbox evasion WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		2 1 16.4 M 36 ZeroCERT

13544 2021-10-14 15:38 Documents.exe  

c2f9ae069b620080b761d9280473e7aa


Gen2 Gen1 Generic Malware UPX Malicious Library Malicious Packer PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows Remote Code Execution crashed 		5.4 M 32 ZeroCERT

13545 2021-10-14 15:38 123.dll  

584aa8473d873ecccb7601672550f4dc


Emotet Gen1 UPX Malicious Library PE File PE32 OS Processor Check DLL Dridex TrickBot VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 5 4 7.8 17 ZeroCERT

keyword