popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13651 2021-10-15 18:11 audio.exe  

98fc6998c7943f10c6eab32dd5f87e92


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Cryptographic key crashed 		26 27 2 10 9.8 M 10 ZeroCERT

13652 2021-10-16 09:44 TimeLimit.exe  

465784e139b2fb62fa2ee0cce3ee5551


Crossrider Adware PE File PE32 VirusTotal Malware AutoRuns Check memory unpack itself suspicious process WriteConsoleW Windows 		4.6 M 20 r0d

13653 2021-10-16 12:38 Đề nghị thanh toán.exe  

a247b100fbea1e86267e033716a3e3df


RAT PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself ComputerName 		2.4 19 ZeroCERT

13654 2021-10-16 12:39 FYI.exe  

d100485ad14f8463450278591b10c698


RAT Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself human activity check Windows DNS Cryptographic key DDNS 		3 1 13.8 28 ZeroCERT

13655 2021-10-16 12:42 Ner Order.exe  

7cfff0e3f8ccab0661299c826aa73e1a


RAT PWS .NET framework Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 1 15.0 20 ZeroCERT

13656 2021-10-16 12:42 KRSEL000005628644.PNG.scr  

bd8f7a95d63891f57462cfa5b2179888


Gen2 Gen1 Generic Malware Malicious Library UPX Malicious Packer DNS AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		2 1 15.8 44 ZeroCERT

13657 2021-10-16 12:43 New Order.exe  

1c347ce8723c87e82c1d22de5e1fe046


RAT PWS .NET framework Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		3 1 15.0 ZeroCERT

13658 2021-10-16 12:45 New Order List & Specification...  

39f59475d4b4672638a90ac2e475cd90


AgentTesla browser info stealer Generic Malware Google Chrome User Data Malicious Library UPX Create Service Socket Code injection Sniff Audio KeyLogger Escalate priviledges Downloader AntiDebug AntiVM PE File OS Processor Check PE32 Buffer PE AutoRuns PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files suspicious process AppData folder sandbox evasion Windows Remote Code Execution DNS DDNS crashed keylogger 		2 1 12.0 ZeroCERT

13659 2021-10-16 12:53 ORIGINAL DOCUMENTS BL, C.I. & ...  

a0747b376c17728fe2731e9e98d1b017


Gen2 Gen1 Generic Malware Malicious Library UPX Anti_VM AntiDebug AntiVM PE File OS Processor Check PE32 Buffer PE AutoRuns PDB Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process sandbox evasion Windows Remote Code Execution crashed 		6.2 ZeroCERT

13660 2021-10-16 12:53 PURCHASE ORDER _467889899098.x...  

90a7b2355d1a256a4dc4e72caca1fb35


RAT Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW human activity check Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 5 1 16.4 20 ZeroCERT

13661 2021-10-16 12:54 SMS LOGS.COM  

6a4e8dbad4bd58452d15a706ff60bea5


AgentTesla NetWire RAT RAT email stealer browser info stealer Generic Malware Google Chrome User Data Malicious Packer Malicious Library UPX Socket DNS KeyLogger ScreenShot AntiDebug AntiVM PE64 PE File OS Processor Check VirusTotal Malware AutoRuns MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key DDNS 		2 10.0 30 ZeroCERT

13662 2021-10-16 12:55 SB_09837635673-309873653673.ex...  

91f4fb77450caf87383a80bca76af4b9


Gen2 Gen1 Generic Malware Malicious Library UPX DNS AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process sandbox evasion WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		2 1 16.4 33 ZeroCERT

13663 2021-10-16 12:56 VWT_0397467389948-039874674.ex...  

eb84b407ad189ab0024269c8ccb42ddb


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 15.0 26 ZeroCERT

13664 2021-10-16 12:58 ADH_Quotation_Sheet-Q202107055...  

8b79c77c9736b590089dc899c6129abf


RAT Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process human activity check Tofsee Windows DNS Cryptographic key crashed 		1 4 1 13.8 22 ZeroCERT

13665 2021-10-16 13:01 Deposit Payment.exe  

c3e635b8e9d4fea44f5c5f9aee4edb3f


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		13.8 ZeroCERT

keyword