popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13801 2021-10-20 09:14 sefile3.exe  

b45cf051beecc52e8b6ed4b09174d8cc


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 38 ZeroCERT

13802 2021-10-20 09:14 132.exe  

97f8f7a08a23c4119347e1ac94b3fdaf


Themida Packer UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		2 11.4 31 ZeroCERT

13803 2021-10-20 09:16 loader%202.exe  

117ac974bd16d21864eef01b22879284


NSIS Malicious Library UPX PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 10.8 M 22 ZeroCERT

13804 2021-10-20 09:16 130.exe  

9d1173da73c0acb7741ffba92279ab6a


Themida Packer UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization installed browsers check Windows Browser ComputerName Remote Code Execution Firmware DNS Cryptographic key Software crashed 		2 11.4 34 ZeroCERT

13805 2021-10-20 09:19 askinstall59.exe  

80dfcce79746fa5f6d6586963f2d0ea6


Gen2 Trojan_PWS_Stealer Credential User Data Generic Malware Malicious Packer Malicious Library SQLite Cookie UPX PE File OS Processor Check PE32 PNG Format Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName Remote Code Execution 		3 6 1 2 7.8 M 48 ZeroCERT

13806 2021-10-20 09:35 1922755485.exe  

88c8a43e9f0d9635f1995352395d79a7


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check PE32 .NET EXE Browser Info Stealer VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		3 5 2 6.6 M 30 ZeroCERT

13807 2021-10-20 09:37 vbc.exe  

d4444398dcb1366ac99eb1074031d5db


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		11.2 M 24 ZeroCERT

13808 2021-10-20 09:40 vbc.exe  

f4cd57e3512cbf801352ea10c2225d4b


NPKI Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee Remote Code Execution crashed 		2 4 1 3.4 M 23 ZeroCERT

13809 2021-10-20 09:41 .csrss.exe  

e61e8fc9b052b9552bfe83657b84171a


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		2 13.8 M 33 ZeroCERT

13810 2021-10-20 09:44 vbc.exe  

a02e884712c9731ee810fb7dbe9cd270


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.6 M 26 ZeroCERT

13811 2021-10-20 09:59 vbc.exe  

97ed6cddaa33543d22927f1aa6a2ec08


RAT PWS .NET framework Generic Malware SMTP KeyLogger ScreenShot AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		10.0 M 29 ZeroCERT

13812 2021-10-20 11:09 chrome.exe  

88ef9621b800849bb2916f4d6654de32


RAT PWS .NET framework Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 3 1 11.8 M 29 ZeroCERT

13813 2021-10-20 11:09 inv_1_____-233000030000.wbk  

8cb07df81d4c6d3798d05097c2af1a01


RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		13 27 8 10 4.4 M 27 ZeroCERT

13814 2021-10-20 11:21 chrome.exe  

88ef9621b800849bb2916f4d6654de32


RAT PWS .NET framework Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Tofsee Windows ComputerName Cryptographic key crashed 		1 2 1 11.2 M 29 조광섭

13815 2021-10-20 11:25 loader1.exe  

66a64f84f91c1dd2bc4b9f01faf15d40


NSIS Malicious Library UPX PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 11.0 M 41 ZeroCERT

keyword