popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13891 2021-10-21 18:06 status.png  

fcb53acd5fd1637a2ac1bc69f396e92c


Malicious Packer UPX PE File OS Processor Check PE32 DLL VirusTotal Malware 		1.4 30 ZeroCERT

13892 2021-10-21 18:12 5_SMSvcHost.resources.dll  

49b0e4b2386c4c7f9b0d3f8748bd34e8


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.2 20 ZeroCERT

13893 2021-10-21 18:12 vbc.exe  

fd382a67a32410c901fe41f842abbf4b


Generic Malware Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Remote Code Execution 		2.6 44 ZeroCERT

13894 2021-10-21 18:13 vbc.exe  

188a0c1b3179c00fa189e73b772dcd72


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		18 19 1 14 9.4 M 28 ZeroCERT

13895 2021-10-21 18:14 vbc.exe  

df43d260e856d3e2ea964c33fc173bbb


Generic Malware Malicious Library UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution 		1 2.8 41 ZeroCERT

13896 2021-10-21 18:17 vbc.exe  

51cd4ea4c20552f51824b13af3a93360


Malicious Library UPX Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM PE File PE32 VirusTotal Malware AutoRuns Code Injection Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName Remote Code Execution crashed 		3 4 1 6.8 30 ZeroCERT

13897 2021-10-21 18:17 vbc.exe  

2da4313d81184d2c0063b445600a8625


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 1 12.2 41 ZeroCERT

13898 2021-10-21 18:19 file.exe  

201e9ae321377c18400c09ff75c9aee6


Gen2 Gen1 Generic Malware Malicious Library UPX Anti_VM DNS AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself sandbox evasion human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		2 1 13.2 29 ZeroCERT

13899 2021-10-21 18:21 vbc.exe  

b1ed59d8b5aa3dd544e3ec56e260b484


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 13.0 16 ZeroCERT

13900 2021-10-21 18:22 vbc.exe  

939580a7f4148b93d390b055e51eb224


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.0 22 ZeroCERT

13901 2021-10-21 18:23 invc_0000560001.wbk  

e569cf93ee6733d55657ada351f94c34


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 2 12 1 4.8 M 29 ZeroCERT

13902 2021-10-21 18:23 7_Microsoft.Data.Entity.Build....  

aba5b0df02c421887cd5899a1e3ee976


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.0 19 ZeroCERT

13903 2021-10-21 18:24 iso-77002387418602.exe  

3446b3427eb52e09af7b7424d8bd6dc3


RAT Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Remote Code Execution DNS Cryptographic key DDNS Software crashed 		2 4 3 14.6 19 ZeroCERT

13904 2021-10-21 18:24 vbc.exe  

05d6732ff73403961d2b131ac1237393


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 36 ZeroCERT

13905 2021-10-21 18:25 cortana.exe  

6c11f38adec40c226ba26d9d0d505b45


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.6 37 ZeroCERT

keyword