popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13786 2021-10-19 10:57 background-2.png  

42bd688964c63e6bdeca18b87dadf2ad


AntiDebug AntiVM PNG Format MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		3.8 guest

13787 2021-10-19 10:58 5f205bc2c1b4b_v.gif  

9ce99ec458daf212f9812a90f3fadd13


Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 5.8 guest

13788 2021-10-19 10:58 5f205bc497791_v.css  

0e646e2e128c473d6fba7996a4a94e40


Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

13789 2021-10-19 16:34 RemoteCMD - 3.0.exe  

70ca048c47aa97e95e1ea36ce2514ac3


Gen2 Generic Malware ASPack Antivirus Malicious Library UPX PE File PE32 VirusTotal Malware Creates executable files WriteConsoleW Remote Code Execution 		1.4 10 ZeroCERT

13790 2021-10-19 16:40 askinstall25.exe  

61d264f734124d172092b1598a913121


Gen2 Trojan_PWS_Stealer Credential User Data Generic Malware Malicious Packer Malicious Library SQLite Cookie UPX PE File OS Processor Check PE32 PNG Format Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution DNS crashed 		4 8 3 3 10.2 M 42 ZeroCERT

13791 2021-10-19 16:43 mon.exe  

d5e15de49142f442f0932e1f0634675b


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		10 20 1 8 7.8 M 18 ZeroCERT

13792 2021-10-19 16:46 dllhost.exe  

655400c95408ab33a90686b581a100d0


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 4 1 8.8 18 ZeroCERT

13793 2021-10-19 16:48 mon90.exe  

b7e2519de2759907f645492f484c39fc


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		18 17 2 18 9.8 M 15 ZeroCERT

13794 2021-10-19 16:49 mon-08.exe  

ec1b280b8817840e6017001c5acc34a4


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		7 17 1 6 8.4 M 23 ZeroCERT

13795 2021-10-19 16:51 1.exe  

bfbbb8571fc1d4dbd8053e5154cda305


VMProtect Malicious Library PE File PE32 VirusTotal Malware RWX flags setting unpack itself Checks Bios sandbox evasion anti-virtualization DNS 		2 4.4 M 38 ZeroCERT

13796 2021-10-19 17:11 1311719753.ppt  

3e804f9f266483ec4884546f08e396a8


VBA_macro Generic Malware MSOffice File VirusTotal Malware RWX flags setting unpack itself Tofsee 		1 2 1 1.6 22 ZeroCERT

13797 2021-10-19 17:13 Purchase orders with bank deta...  

87b2f6337fbea5ee3f10eb1b210dd795


VBA_macro Generic Malware AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection Check memory RWX flags setting unpack itself suspicious process Tofsee Interception 		1 2 1 5.4 10 ZeroCERT

13798 2021-10-20 08:10 csrss.exe  

a6cf11855cd106ea4fcc35c40906331b


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 40 ZeroCERT

13799 2021-10-20 08:11 vbc.exe  

f583feb26da2d5b49c45c7b00e537803


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 13.4 19 ZeroCERT

13800 2021-10-20 08:11 TDH_71036210065IMG.exe  

7afe2c262a2733bc25fe30a077621766


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Remote Code Execution DNS Cryptographic key DDNS Software crashed 		2 4 3 13.0 17 ZeroCERT

keyword