popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13906 2021-10-21 18:26 vbc.exe  

d4a99da8dad738056893d74202045a0a


NSIS Malicious Library UPX PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 3 10 11.2 31 ZeroCERT

13907 2021-10-21 18:27 csrss.exe  

0929fb7f0a76cd563c16ba1b3303dcb4


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 14.6 19 ZeroCERT

13908 2021-10-21 18:28 reza123reza.ps1  

2c2a464ee3cbac261020d096df5b3d15


Generic Malware Antivirus Check memory unpack itself Windows Cryptographic key 		0.8 ZeroCERT

13909 2021-10-21 18:31 dictate 010.21.doc  

3128a1aa061355d275cd323336148c4a


VBA_macro Malicious Library UPX Word 2007 file format(docx) GIF Format PE64 PE File OS Processor Check DLL Malware download VirusTotal Malware Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself suspicious process AntiVM_Disk VM Disk Size Check Interception Windows 		1 2 3 7.6 18 ZeroCERT

13910 2021-10-21 18:32 loader3.exe  

5e9c6466f89089a73465bec3e84f6731


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder 		25 26 2 7.0 24 ZeroCERT

13911 2021-10-21 18:32 QA4ty2uUkTCD2tfNQSE5.exe  

1eada844f6d267f4451b9ffa8eba6624


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 15.0 30 ZeroCERT

13912 2021-10-21 18:34 vbc.exe  

016d9078762cb89a6043b916f3634374


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		12.8 24 ZeroCERT

13913 2021-10-21 18:45 vbc.exe  

43c4f31951dfaa67b56f438bc1454522


Malicious Library UPX PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Tofsee Windows crashed 		11 24 2 9.8 19 ZeroCERT

13914 2021-10-21 18:46 vbc.exe  

d0e4c13e6c8ba9fe34d86b554b595d9a


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		18 24 1 8 6.2 M 24 ZeroCERT

13915 2021-10-21 18:46 vbc.exe  

1be75ae8266bee2a29b8846a503fbd44


NSIS Malicious Library UPX PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 23 ZeroCERT

13916 2021-10-21 18:47 vbc.exe  

5118a67b86f2cad297041b94b6531470


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 3 7 13.0 19 ZeroCERT

13917 2021-10-21 18:49 vbc.exe  

03c4801d0dc21f4d6f0ba7df857844f9


Loki PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 1 13.0 M 24 ZeroCERT

13918 2021-10-21 18:49 p.rar  

3fd464b516d58fe73d39af362b397478


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		3.8 ZeroCERT

13919 2021-10-21 18:51 vbc.exe  

e412dec033b703991798c4ac7f7b013b


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 7 13.0 23 ZeroCERT

13920 2021-10-21 18:54 Int-Report-Poonch.rar  

66d3eeb3e3466a255e8f8dd5aa90175d


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		3.8 ZeroCERT

keyword