popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13921 2021-10-22 09:04 8_hp8500at.dll  

f8c801f32b822d210bbb788407ed29cf


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.0 16 ZeroCERT

13922 2021-10-22 09:04 Notepad.EXE  

f072f3491834b7d05e0ae01c78de778e


Generic Malware Antivirus PE64 PE File VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger WMI Creates shortcut Creates executable files ICMP traffic unpack itself suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		5 2 9.6 38 ZeroCERT

13923 2021-10-22 09:05 lv.exe  

63c6959237b662401a9f78e799d34db1


Gen1 Gen2 Themida Packer Generic Malware Malicious Library UPX Admin Tool (Sysinternals etc ...) Malicious Packer PE File PE32 DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself Checks Bios Detects VMWare AppData folder VMware anti-virtualization Windows Firmware crashed 		6.8 31 ZeroCERT

13924 2021-10-22 09:06 2_api-ms-win-downlevel-normali...  

00752a06db0eacfd3b09e36d3a3d29c6


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.0 15 ZeroCERT

13925 2021-10-22 09:07 5_System.Numerics.dll  

4aa41378b7c700010b1a3ec72a588306


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.0 14 ZeroCERT

13926 2021-10-22 09:07 subzero.png  

320fdabe9103d3e4bd67d2920e784640


AntiDebug AntiVM PE File PE32 DLL Dridex TrickBot Malware Report suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Tofsee Kovter ComputerName DNS crashed 		9 9 7 9.8 ZeroCERT

13927 2021-10-22 09:09 9_sysprepMCE.dll  

493affe2d3fb24b9ef24a523292df0be


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.0 16 ZeroCERT

13928 2021-10-22 09:09 slovarikinstalls.exe  

4788b9f2b49471fa3f20ce9ac9fd8524


RAT PWS .NET framework Generic Malware UPX PE File OS Processor Check PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Report suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 2 6.2 26 ZeroCERT

13929 2021-10-22 09:10 vbc.exe  

a91eb16dec4963d0b7198e9bb1b3d379


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 26 ZeroCERT

13930 2021-10-22 09:10 1_ieakui.dll  

74e4a2208c91735a96bfbbba392b221a


Malicious Library PE File PE32 DLL VirusTotal Malware 		1.0 16 ZeroCERT

13931 2021-10-22 09:11 101.exe  

9d4458f6de6fb97b9b2a6ee9a69b62f4


RAT PWS .NET framework Generic Malware ASPack Malicious Packer Malicious Library UPX Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Ransom Message installed browsers check Tofsee Ransomware GameoverP2P Zeus Windows Browser Tor ComputerName Trojan Banking Cryptographic key crashed 		2 3 1 20.2 35 ZeroCERT

13932 2021-10-22 09:11 vbc.exe  

704f90b4d0eb8b2c5d76d119d1130039


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.6 27 ZeroCERT

13933 2021-10-22 09:12 hswaxn.exe  

c0fd2bdc5772986959399b514d854a9c


PE64 PE File VirusTotal Malware 		1.4 36 ZeroCERT

13934 2021-10-22 09:13 0_WPDSp.dll  

8bbac1f6e64537bd91f903994912dc96


Malicious Library PE File PE32 DLL VirusTotal Malware 		2.0 14 ZeroCERT

13935 2021-10-22 09:14 buildz.exe  

8daa272f411b68ce0bfbb42c9785bf3c


PWS Loki[b] Loki.m AgentTesla browser info stealer [m] Generic Malware task schedule Malicious Library UPX ScreenShot DGA Socket DNS Internet API Http API AntiDebug AntiVM PE File OS Processor Check PE32 Malware download Dridex Malware Microsoft AutoRuns PDB Code Injection Checks debugger buffers extracted Creates executable files unpack itself Windows utilities AppData folder malicious URLs suspicious TLD WriteConsoleW Tofsee Windows ComputerName Remote Code Execution DNS crashed 		2 8 12 1 11.6 M ZeroCERT

keyword