popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14071 2021-10-26 18:16 SecuROM.exe  

41ed34b70460e1eb3b561fbc89b65052


Generic Malware UPX Malicious Library PE64 PE File OS Processor Check PE32 VirusTotal Malware MachineGuid Check memory Checks debugger Creates executable files unpack itself AppData folder Tofsee DNS crashed 		2 3 3.8 26 ZeroCERT

14072 2021-10-26 18:18 Sample_10120351200_ISO_035123....  

8078dc94b90c42ba12f6ece2330c0586


RAT Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 15.4 41 ZeroCERT

14073 2021-10-27 08:03 solex.exe  

9e37ecd7b3a3cc19e3fb569a8f79f2c0


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 37 ZeroCERT

14074 2021-10-27 09:28 cross2007.exe  

2626a621fab10eec02e1c3dc2ab29361


Gen2 Malicious Library UPX PE File OS Processor Check PE32 Malware download VirusTotal Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger WMI unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		6 2 5 6.6 39 ZeroCERT

14075 2021-10-27 09:28 vbc.exe  

a1b4d8c4d876a9dc57c0a75bdef1f13b


Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		3 4 1 3.0 23 ZeroCERT

14076 2021-10-27 09:32 LOIC.exe  

e6fa3028cd03318496852718143d256f


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key 		3.0 M 58 ZeroCERT

14077 2021-10-27 09:37 A67gmDqdYqpHVq5d122pdf.exe  

6318403488d61f1b6827886675f4180f


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 13.2 24 ZeroCERT

14078 2021-10-27 09:40 E7pPa8kXU2X9H8nyCZseBfpdf.exe  

e168c49cc388f05d310f780f70661c47


Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI RWX flags setting unpack itself Windows ComputerName Cryptographic key crashed 		10.4 19 ZeroCERT

14079 2021-10-27 10:01 vbc.exe  

9413abe81e45cc16409f67dae8e0fa65


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		12.0 23 ZeroCERT

14080 2021-10-27 10:01 rundll32.exe  

9b5b273ed09f8565eb795f35ba1e33c6


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		7 17 2 2 7.2 M ZeroCERT

14081 2021-10-27 10:03 vbc.exe  

f1119af41aa1a22ea18df0c7b51aac11


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		9.2 43 ZeroCERT

14082 2021-10-27 10:03 vbc.exe  

6ff3af29fcf1cabca1e7df8a6094e4a3


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		4 10 2 3 11.4 M 37 ZeroCERT

14083 2021-10-27 10:05 file.exe  

0c9545e5c6c941d4288d1089b5a34e39


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 34 ZeroCERT

14084 2021-10-27 10:05 .csrss.exe  

e17907e78bff51fd0ffc739cf604de30


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 13.8 M 21 ZeroCERT

14085 2021-10-27 10:07 vbc.exe  

c30565830025332db48b9f38ddb2ab3f


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.0 21 ZeroCERT

keyword