popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13621 2023-04-26 18:16 services.exe  

169457576b3c270c112f87cdfefdb688


NPKI RAT PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 25 ZeroCERT

13622 2023-04-26 18:15 vbc.exe  

fe889bf209a5e139d07c128c6d0ba877


Formbook PWS .NET framework RAT AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces Windows ComputerName DNS Cryptographic key crashed 		4 8 1 11.6 M 44 ZeroCERT

13623 2023-04-26 18:14 Hpzplthjq.exe  

fffbb8afb4ca73ec2063d73427c847fe


PWS .NET framework NPKI RAT Generic Malware Anti_VM Antivirus AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware powershell Telegram suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows ComputerName DNS Cryptographic key 		2 4 9.4 M 27 ZeroCERT

13624 2023-04-26 18:13 vbc.exe  

e5a5bcc3b19a3ff03d5643d1691678d1


Formbook NSIS UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		18 19 3 17 4.4 M 38 ZeroCERT

13625 2023-04-26 18:13 Nfjyejcuamv.exe  

acab984940bec865cd71484a347f19ef


PWS .NET framework RAT Generic Malware Antivirus AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell Telegram AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 4 13.4 M 41 ZeroCERT

13626 2023-04-26 18:12 v123.exe  

77437c98a8d412e5d30f155b4ebb01f1


RAT PE64 PE File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.4 M 41 ZeroCERT

13627 2023-04-26 18:10 4496UxfTzlWPSipCNwsExWDmnyON.e...  

a5e6069290231f257359111967312e62


UPX Malicious Packer Malicious Library OS Processor Check PE64 PE File VirusTotal Malware 		1.4 M 42 ZeroCERT

13628 2023-04-26 18:08 %23%23%23%23%23%23%23%23%23%23...  

8abfd578bb043d2795ee00c838fb9c68


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		2 1 7 5.0 M 33 ZeroCERT

13629 2023-04-26 18:08 nxmr.exe  

41ab08c1955fce44bfd0c76a64d1945a


PE64 PE File VirusTotal Cryptocurrency Miner Malware Cryptocurrency DNS 		1 2 2.2 M 46 ZeroCERT

13630 2023-04-26 16:27 Fyeiilfzrf.dll  

69b4e6d6e95ffa9081b6f85baba7bad9


Suspicious_Script_Bin 		guest

13631 2023-04-26 13:24 UpdateCheck.bat  

bc34fd92d1882dc20f5472c8ff1e4070


Generic Malware Downloader UPX Antivirus Create Service DGA Socket DNS Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges FTP KeyLogger ScreenShot AntiDebug AntiVM PE32 PE File VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		5.0 5 ZeroCERT

13632 2023-04-26 09:54 install.exe  

4e5ee4f3a7bedafc362f50ab73608ad7


PWS .NET framework NPKI RAT PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		7.4 M 25 ZeroCERT

13633 2023-04-26 09:51 services.exe  

0d009ea0386e4668e4fe910f13092bf4


NPKI UPX OS Processor Check PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 M 40 ZeroCERT

13634 2023-04-26 09:48 tryme.ps1  

641680e7fec9daae06d736941db655d1


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		4.8 M 7 ZeroCERT

13635 2023-04-26 09:48 reverse.exe  

d32a31a376731f31251a2d17ea3828bf


PE64 PE File VirusTotal Malware DNS crashed 		1 3.6 M 47 ZeroCERT

keyword