popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13741 2021-10-19 09:42 8451.exe  

7d0ab695c712dccd72a7eba3f2db14be


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 3.2 M 33 ZeroCERT

13742 2021-10-19 09:43 Requests07520000652.exe  

99a0109485e8ca6d9ee2b809390d89b8


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 3.0 M 25 ZeroCERT

13743 2021-10-19 09:44 34522201036.exe  

e09367e4c8c23541902285438711ec86


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 3.0 M 24 ZeroCERT

13744 2021-10-19 09:45 lv.exe  

75970d264d08b42ae47cfd3df6c9a3f4


Themida Packer PE64 PE File VirusTotal Malware unpack itself Windows crashed 		2.6 27 ZeroCERT

13745 2021-10-19 09:46 index.php  

d78109d9c17ca4493bdde1ac95bdccfd


Malicious Library UPX PE File OS Processor Check PE32 PDB unpack itself Remote Code Execution 		1.4 ZeroCERT

13746 2021-10-19 09:47 office.exe  

57be051a2a20b292fc8cb67c4f31c4f9


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.6 40 ZeroCERT

13747 2021-10-19 09:48 host.exe  

003e691923293c72dca0b670e9ff9390


PE File PE32 VirusTotal Malware 		2.2 M 52 ZeroCERT

13748 2021-10-19 09:50 micro.jar  

b2097471ac7d4e8304a119e815ac5261


NPKI Malicious Library UPX Malicious Packer PE File OS Processor Check PE32 DLL Malware download NetWireRC VirusTotal Malware AutoRuns Check memory buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder suspicious TLD WriteConsoleW Windows Java ComputerName DNS crashed 		1 10 5 1 9.0 M 15 ZeroCERT

13749 2021-10-19 09:51 70016103621110.exe  

5139e24e3fa4d06a143dd7d297a44ee7


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 4 1 3.0 M 29 ZeroCERT

13750 2021-10-19 09:52 vbc.exe  

d55204cd0ff7e8de80265243cad2c19a


Loki PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 14.2 M 44 ZeroCERT

13751 2021-10-19 09:55 rundll32.exe  

fa3d5b504712ac42e68f6c5d98598e1e


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		7 15 2 2 7.8 M 14 ZeroCERT

13752 2021-10-19 09:55 cock.mp4  

d050948cba26749ca0ae38c401cae549


Gen2 Gen1 VMProtect Malicious Library UPX Malicious Packer PE File PE32 DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Malicious Traffic Check memory Creates executable files RWX flags setting unpack itself Windows utilities Checks Bios Collect installed applications suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Ransomware Zeus Windows Browser Advertising ComputerName Trojan DNS Software 		6 2 8 13.8 M 24 ZeroCERT

13753 2021-10-19 09:55 vbc.exe  

bf6bcbda23200e2bb0b6acc4fd744ad5


Gen2 Gen1 Generic Malware Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		2.0 M 24 ZeroCERT

13754 2021-10-19 09:58 vbc.exe  

70e9b753cb1f4f173c75c0d85f5e5a48


UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		2.4 M 23 ZeroCERT

13755 2021-10-19 09:58 .winlogon.exe  

52cd71bde1c747ac5eef94c0a71ffe70


RAT PWS .NET framework Generic Malware Malicious Packer SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		11.8 M 22 ZeroCERT

keyword