popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13681 2021-10-16 13:26 file.exe  

c200e4d07007a35710e92d7dfceb0324


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 M 28 ZeroCERT

13682 2021-10-16 13:29 vbc.exe  

cc92dedec89f09b08729784048f1060b


Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		1 2 1 2.8 M 34 ZeroCERT

13683 2021-10-16 13:29 vbc.exe  

7ca5a6d622c55365fda10c9e9ba8ee88


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware Phishing suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		24 24 3 14 7.2 M 23 ZeroCERT

13684 2021-10-16 13:32 zool.exe  

87cd2ddf31c62ed3219d2c559d4a9cb6


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 17 1 8 8.4 M 41 ZeroCERT

13685 2021-10-16 13:33 .wininit.exe  

b007ee7994afb90b45e3fb23d0acc313


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.4 M 38 ZeroCERT

13686 2021-10-16 13:37 zoo.exe  

2c2811633faebf78e7bdefb5e8867faf


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		11 24 2 10 8.0 M 16 ZeroCERT

13687 2021-10-16 13:40 DOCS-20211510-VP-KMC022021.scr  

bc87c171c5e5c075ebcb336ca4518452


Generic Malware UPX Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key 		1 17.4 21 ZeroCERT

13688 2021-10-16 13:40 Tax Payment Challan.exe  

9c3259f246b2cd7518816219582660e6


Antivirus Admin Tool (Sysinternals etc ...) UPX PE File PE32 PNG Format JPEG Format VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process WriteConsoleW Interception ComputerName Remote Code Execution crashed 		4.2 32 ZeroCERT

13689 2021-10-18 09:30 Dv31BrowInst.exe  

592bff278b2bf2551ca505447229c399


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder suspicious TLD Tofsee Windows DNS 		9 5 2 7 8.2 M 41 ZeroCERT

13690 2021-10-18 09:31 DownFlSetup166.exe  

9f34928ecd64f71c6f2a7cdd85740586


RAT PWS .NET framework Generic Malware Themida Packer Admin Tool (Sysinternals etc ...) Anti_VM Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces AppData folder VMware anti-virtualization installed browsers check Tofsee Windows Browser Email ComputerName Firmware DNS Cryptographic key Software crashed 		9 16 2 5 17.2 M 21 ZeroCERT

13691 2021-10-18 09:32 customer6.exe  

807f55cee679ba76724aee80756a0c4f


ASPack Malicious Library UPX PE64 PE File OS Processor Check Browser Info Stealer VirusTotal Malware PDB Malicious Traffic Check memory Check virtual network interfaces IP Check Browser Remote Code Execution 		3 4 1 2 4.4 M 47 ZeroCERT

13692 2021-10-18 09:32 DownFlSetup155.exe  

7d09810664be0b0d9dab03e6652cfb26


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		10 7 2 7 9.4 M 46 ZeroCERT

13693 2021-10-18 09:34 491302577.exe  

e7302252512b968f8b082e3a22ecca23


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 5 1 13.0 43 ZeroCERT

13694 2021-10-18 09:34 search_hyperfs_212.exe  

816fb2a92609e69e339ee9677647b7f8


Malicious Library UPX Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM PE File OS Processor Check PE32 DLL VirusTotal Malware PDB suspicious privilege Code Injection Check memory WMI unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName Remote Code Execution 		6.8 35 ZeroCERT

13695 2021-10-18 09:36 2103609787.exe  

4058a27cf325710ab5a9020fe95e57f7


Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.6 45 ZeroCERT

keyword