popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13606 2023-04-27 10:04 vbc.exe  

bfce1c2471b74c39a21f034bd3ba0ca2


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 47 ZeroCERT

13607 2023-04-27 10:04 vbc.exe  

bf06b230800b247480122519febf9b1b


Formbook NSIS UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself DNS 		19 20 3 17 5.8 M 36 ZeroCERT

13608 2023-04-27 09:59 calcinstall.exe  

881bef8377f48946c3863d06b3de735a


RAT Gen1 Gen2 Schwerer Generic Malware UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM Obsidium protector .NET EXE PE32 PE File DLL OS Processor Check GIF Format MZP Format PE64 HWP MSOffice File VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk suspicious TLD sandbox evasion WriteConsoleW VM Disk Size Check human activity check Tofsee Ransomware Windows ComputerName crashed 		1 6 1 13.0 M 34 ZeroCERT

13609 2023-04-27 09:58 vbc.exe  

7ee7421fc12096ec24a2cb1706c5c734


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 51 ZeroCERT

13610 2023-04-27 09:53 vbc.exe  

773da960aeb7c6260cfe6328aafd922f


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 49 ZeroCERT

13611 2023-04-27 09:51 vbc.exe  

a1ef3aeba94469b98befd1a6ba1a8b47


RAT UPX Malicious Library OS Processor Check PE64 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself 		2.6 M 42 ZeroCERT

13612 2023-04-27 09:49 vbc.exe  

50a75fb5b12450844ace5ef53a050ead


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 41 ZeroCERT

13613 2023-04-27 09:47 originalbuild.exe  

6bdbea0ec35358cc728f0213603bc9f5


RAT Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 6.0 M 38 ZeroCERT

13614 2023-04-27 07:47 name.hta  

1e34ba7ca79958f904b2fcaebe9532e2


RAT Generic Malware task schedule Anti_VM Antivirus ScreenShot AntiDebug AntiVM PowerShell .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer NetWireRC Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut Creates executable files unpack itself Checks Bios Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check Tofsee DCRat Windows Browser ComputerName Firmware DNS Cryptographic key Software crashed 		15 4 7 22.0 M ZeroCERT

13615 2023-04-27 03:18 0A7FCD23-2B52-47F2-9A10-79A2B7...  

4e55bf3f7eb04fb987a1bfa08f768675


JPEG Format 		BRY

13616 2023-04-27 02:26 DS_Store-5  

93103d36de62ffb10919f3e7fc51783a


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself installed browsers check Browser Email 		3.2 BRY

13617 2023-04-27 02:17 DS_Store  

e84de8d6be88362a63d11938960b1fbd


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself installed browsers check Browser Email 		3.2 BRY

13618 2023-04-26 18:26 reverse.exe  

d32a31a376731f31251a2d17ea3828bf


Meterpreter PE64 PE File VirusTotal Malware DNS crashed 		1 3.2 M 47 r0d

13619 2023-04-26 18:21 %23%23%23%23%23%23%23%23%23%23...  

8c04ebf8df5396b9d4cd12056d0a42fe


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		4 6 8 5.0 M 35 ZeroCERT

13620 2023-04-26 18:19 debug.dbg  

070b332f2ba3f1248c43931c8e9b54c2


AntiDebug AntiVM ELF VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		4.4 M 39 ZeroCERT

keyword