popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13966 2021-10-22 17:03 vbc.exe  

a5ad00e076df522a7002ec00b4531bae


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 22 ZeroCERT

13967 2021-10-22 17:04 gregzx.exe  

43040c5411616eb26e97dd9beac0a329


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 13.0 15 ZeroCERT

13968 2021-10-22 17:06 138.exe  

cf92a854dea1fb28cb12c47f6b5d595b


Generic Malware Themida Packer UPX PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger ICMP traffic unpack itself Checks Bios Detects VMWare VMware anti-virtualization Windows Remote Code Execution Firmware DNS Cryptographic key crashed 		1 9.0 30 ZeroCERT

13969 2021-10-22 17:08 fdsf.wbk  

101432a1a18a5696344be741f620349b


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted RWX flags setting exploit crash Windows Exploit DNS crashed Downloader 		2 3 13 4.8 27 ZeroCERT

13970 2021-10-22 17:08 Sample.exe  

b31b5c207c40b7f5a343125fe4f08e8a


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		3 6 3 13.4 31 ZeroCERT

13971 2021-10-22 17:19 vbc.exe  

c8448f9cc3379dcbc504469d36446ed5


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 22 ZeroCERT

13972 2021-10-23 01:45 inCFxdZ2eOW7KAW.exe  

709e4bfe015ece74ba2f90752f1c1164


RAT PWS .NET framework Generic Malware task schedule Malicious Packer AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 13.2 M 55 guest

13973 2021-10-23 09:42 asadzx.exe  

6908cd5efe5473c75c9f2fc4a0b71557


RAT PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		8.8 22 ZeroCERT

13974 2021-10-23 09:42 mazx.exe  

bf2302cff715f9a1467dce502cad654d


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		2 4 1 1 8.0 M 28 ZeroCERT

13975 2021-10-23 09:44 vbc.exe  

8efc94a68d078ed67459403c868aa9f0


NSIS Malicious Library UPX PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder ComputerName 		4.4 24 ZeroCERT

13976 2021-10-23 09:44 vbc.exe  

d64d1b6ebcfe87c43b84001380cd3477


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 13.2 M 29 ZeroCERT

13977 2021-10-23 09:46 101.exe  

d1b620ccec63f2d35f0225d7c2fe5b85


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key 		2 2 1 3.6 21 ZeroCERT

13978 2021-10-23 09:46 os.zip  

07f5f3b04b3997354115cc715febc848


Malicious Library PE File PE32 JPEG Format Malware download Amadey VirusTotal Malware AutoRuns PDB Malicious Traffic unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		2 3 1 6.2 47 ZeroCERT

13979 2021-10-23 09:49 star.exe  

36a1f9ebb9147ae271bfc11b3594a282


RAT PWS .NET framework Generic Malware Antivirus PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key crashed 		2 2 1 6.8 21 ZeroCERT

13980 2021-10-23 09:49 vbc.exe  

34df0e4d3d5863b1a86489be85a045aa


Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Tofsee crashed 		3 4 1 3.8 26 ZeroCERT

keyword