popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13711 2021-10-18 17:52 PO-15102021.xlsx  

3649a4e4e640017f163b9f1f164a63b7


VirusTotal Malware Malicious Traffic RWX flags setting exploit crash unpack itself Exploit DNS crashed 		1 1 1 4.4 28 guest

13712 2021-10-18 17:52 EU-Business-Register (1).pdf  

ad93c19fcd03385c359be007ee7631f8


PDF VirusTotal Malware unpack itself Windows utilities Windows 		1.8 1 guest

13713 2021-10-18 17:54 RunPE.dll  

ef4602191703199ba701c12b66971c73


RAT Generic Malware Malicious Packer PE File PE32 .NET DLL DLL VirusTotal Malware PDB 		1.0 21 ZeroCERT

13714 2021-10-18 17:58 invc_009030009.wbk  

ea27c453801a76553e850c260b6a288b


RTF File doc FormBook Malware download Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		31 29 8 8 4.0 M ZeroCERT

13715 2021-10-18 18:01 lkki.exe  

f3301d2cf11d1d4884f4922ff204042b


Loki PWS Loki[b] Loki.m Malicious Packer PE File PE32 Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 7.4 M 63 ZeroCERT

13716 2021-10-18 18:02 vbc.exe  

4c7f75dbea906c8bac51094411dd5467


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.8 23 ZeroCERT

13717 2021-10-18 18:03 vbc.exe  

f769e91b05ea8c5cd73c26b2c047fb50


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 12.8 18 ZeroCERT

13718 2021-10-18 18:07 004109043806_4.xls  

f64066fff51a9027fdcc09cc945348f1


VBA_macro Generic Malware MSOffice File VirusTotal Malware RWX flags setting unpack itself 		1.2 6 ZeroCERT

13719 2021-10-18 18:14 vbc.exe  

d5f480d1d4cf7902094668a09856c79a


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder 		27 25 2 16 6.8 M 19 ZeroCERT

13720 2021-10-18 18:16 csrss.exe  

b1d25fccfa3bac61c224dee5ac4da7c9


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself 		1.6 32 ZeroCERT

13721 2021-10-19 07:40 soleApp11.exe  

be89eef16c6bff3aeba20d44c6fdd929


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 2.8 19 ZeroCERT

13722 2021-10-19 09:20 star.exe  

3e9ad03497178a5b4d170acc379fae62


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		1.8 M 19 ZeroCERT

13723 2021-10-19 09:21 101.exe  

4ca6ef20b73800f2c9e596f430b70456


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key 		1.8 19 ZeroCERT

13724 2021-10-19 09:23 vbc.exe  

d5221f463d6fe2799e405236513610cb


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 37 ZeroCERT

13725 2021-10-19 09:23 bll_3605800091212.exe  

8a5336e1f45a85b04b3b8930a714a7b0


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 2.8 16 ZeroCERT

keyword