popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13606 2021-10-15 09:14 game.exe  

6aa2ecbc4dec00bba7febafced91e048


UPX Malicious Library PE File PE32 OS Processor Check PDB unpack itself 		1.0 ZeroCERT

13607 2021-10-15 09:15 VLTKTanthuTN.exe  

72ae1ef77048260282b4e791eede5e3c


RAT PWS .NET framework Generic Malware Malicious Packer PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces human activity check Windows crashed keylogger 		3 14 9.0 15 ZeroCERT

13608 2021-10-15 09:16 1562391525.exe  

604b759172262363118ab37833ca63bb


PE File PE32 VirusTotal Malware unpack itself Windows utilities WriteConsoleW Windows ComputerName 		2.8 23 ZeroCERT

13609 2021-10-15 09:17 112.exe  

503015d7869b5edd64e07b0c733df2fc


Lazarus Family Themida Packer UPX Anti_VM Malicious Library PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VMWare Check virtual network interfaces VMware anti-virtualization Windows Remote Code Execution Firmware DNS Cryptographic key crashed 		1 1 7.4 M 22 ZeroCERT

13610 2021-10-15 09:19 update.exe  

9488b446052990dfb70a62e3efa57477


Generic Malware Antivirus Malicious Packer Malicious Library Create Service DGA Socket DNS Code injection Sniff Audio HTTP Internet API KeyLogger FTP ScreenShot Http API Escalate priviledges Downloader P2P Steal credential AntiDebug AntiVM PE File PE32 PE VirusTotal Cryptocurrency Miner Malware Cryptocurrency powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 1 8.4 M 33 ZeroCERT

13611 2021-10-15 09:40 me.exe  

8cbc2f3f7e55f6d8a1e28816d9621d0a


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Disables Windows Security Check virtual network interfaces WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 15.2 M 24 ZeroCERT

13612 2021-10-15 09:41 LS.exe  

50bc873b8e08fdc5832350f377a1b5a7


UPX Malicious Library PE File PE32 VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself AppData folder Windows crashed 		4.0 M 43 ZeroCERT

13613 2021-10-15 09:41 vbc.exe  

10397feb14b5e8aad2b1e8fd3686763c


UPX Malicious Library PE File PE32 OS Processor Check VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 37 ZeroCERT

13614 2021-10-15 09:42 vbc.exe  

607afbfc6f90d724bd7014ca4ab30be5


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		20 21 1 8.2 M 18 ZeroCERT

13615 2021-10-15 09:44 vbc.exe  

215e5cc2650d15c79ab17bd24e8458b9


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		2.4 M 29 ZeroCERT

13616 2021-10-15 09:44 aeopmguywjffmigwnfbefrvgqg.exe  

8d81b074c6351ef6cb801ddbc24d4354


PWS Loki[b] Loki.m Generic Malware task schedule Antivirus DNS KeyLogger ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process AppData folder WriteConsoleW IP Check Windows ComputerName DNS Cryptographic key DDNS crashed 		1 6 1 14.8 M 31 ZeroCERT

13617 2021-10-15 09:46 vbc.exe  

025eaccfdecb9df000e526122ce84aa2


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution DNS 		1 3.2 M 31 ZeroCERT

13618 2021-10-15 09:46 vbc.exe  

09a2d9ea4a18f01aff698b8cfc98a87e


UPX Malicious Library PE File PE32 VirusTotal Malware DNS 		1 1.6 M 14 ZeroCERT

13619 2021-10-15 09:49 PrimeAuth.exe  

6e88324fa975a177ec1aae3a7e9cbf0c


RAT PWS .NET framework Generic Malware UPX Malicious Library PE File PE32 OS Processor Check .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 47 ZeroCERT

13620 2021-10-15 09:50 1st0build.exe  

fa36788c0488fe6f660e5ea1e9ca277a


RAT PWS .NET framework Generic Malware ASPack Malicious Packer UPX Malicious Library Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs suspicious TLD sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 7 1 18.2 M 38 ZeroCERT

keyword