popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13951 2021-10-22 09:36 dllhost.exe  

6923309c1cf759930f67710ac9dfd328


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows DNS 		1 5 1 11.8 26 ZeroCERT

13952 2021-10-22 09:38 vbc.exe  

75d7e4d1730247c05bd66666c8902d56


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 28 ZeroCERT

13953 2021-10-22 09:40 vbc.exe  

efe651adf6dfc657dfe4d65434e2de5c


Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		2 4 1 3.6 28 ZeroCERT

13954 2021-10-22 09:46 hswaxn.exe  

c0fd2bdc5772986959399b514d854a9c


Generic Malware PE64 PE File VirusTotal Malware 		1.4 36 r0d

13955 2021-10-22 09:48 hswaxn.exe  

c0fd2bdc5772986959399b514d854a9c


Generic Malware PE64 PE File VirusTotal Malware 		1.4 36 guest

13956 2021-10-22 11:15 REE20212110575259OCT.exe  

9c00fc940483cff2a0f3f619db16ad54


PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		8 19 3 2 10.6 M 20 ZeroCERT

13957 2021-10-22 11:32 QS.exe  

8febef9e39284335678e45955722d6a6


Malicious Library UPX PE File PE32 VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself AppData folder Windows Remote Code Execution crashed 		4.6 46 ZeroCERT

13958 2021-10-22 11:34 .vbc.exe  

61f55bceba5b9a52c750555d62fc7ae9


Malicious Library UPX Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName crashed 		11 12 5 12.6 24 ZeroCERT

13959 2021-10-22 11:34 catzx.exe  

722745a1b594b935445310f8b4f0b9af


Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 14.0 26 ZeroCERT

13960 2021-10-22 11:35 vbc.exe  

1f0a0de6491ff5fb6c2e095a9104777b


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 13.8 M 22 ZeroCERT

13961 2021-10-22 11:37 ucv8e7nhw53f88ef37s9.exe  

3a8369a0ce3b79b7a0e7200ff88d1b91


Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself ComputerName 		2.8 47 ZeroCERT

13962 2021-10-22 11:37 LS.exe  

0ee296f164c65caaf03788bff0f45d45

 ZeroCERT

13963 2021-10-22 11:39 obinnazx.exe  

af594d3a1f091246b196ac370b8b4900


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		2 5 5 8.6 36 ZeroCERT

13964 2021-10-22 11:41 IMG_572452.exe  

95029e00a50b60c370c4fcdc60cb0b6d


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 9.2 15 ZeroCERT

13965 2021-10-22 12:01 seasonzx.exe  

664920ea617d6c5f15c228b7374aa15f


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 4 1 8.0 25 ZeroCERT

keyword