popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14086 2021-10-27 10:09 abb01.exe  

05c21bf3df38d5b8365db71d94dbca37


Malicious Library UPX PE File OS Processor Check PE32 FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		12 25 1 3.6 43 ZeroCERT

14087 2021-10-27 10:09 sefile.exe  

274054f8343ab8e7e4422e325e9aa874


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 24 ZeroCERT

14088 2021-10-27 10:10 vbc.exe  

2d84b38efa4ce09e9b92c7d9cdfaadfa


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		6 15 1 9.8 25 ZeroCERT

14089 2021-10-27 10:13 temple.exe  

aa097cd2ea67822b909850f8f6df13b2


Gen1 Gen2 Themida Packer Generic Malware Malicious Library UPX Anti_VM Malicious Packer PE File PE32 DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself Checks Bios Detects VMWare AppData folder VMware anti-virtualization Windows Firmware crashed 		6.6 29 ZeroCERT

14090 2021-10-27 10:13 .csrss.exe  

e54e7ec5aa72f4d5bb128553728fb209


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		8 18 2 9.4 36 ZeroCERT

14091 2021-10-27 10:14 game.exe  

afdd13f1365200afbcadcfe2c702c785


Malicious Library UPX PE File OS Processor Check PE32 PDB unpack itself Remote Code Execution 		1.2 ZeroCERT

14092 2021-10-27 10:14 sefile3.exe  

a652999a5f462a68a3b68ce0a817b5c0


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 23 ZeroCERT

14093 2021-10-27 10:16 askinstall59.exe  

b0148682e7c912ae740355e8a37c23f6


Gen2 Trojan_PWS_Stealer Credential User Data Generic Malware Malicious Packer Malicious Library SQLite Cookie UPX PE File OS Processor Check PE32 PNG Format Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Checks debugger WMI Creates executable files exploit crash Windows utilities suspicious process suspicious TLD WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution DNS crashed 		4 8 3 3 10.2 M 44 ZeroCERT

14094 2021-10-27 10:16 sqlservr.exe  

ffc90ece293d4a8d6d7d5da217ab51be


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 14.2 M 23 ZeroCERT

14095 2021-10-27 10:19 vbc.exe  

2bd0212a01ee6f425e6eb61ae258def9


Emotet Generic Malware Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		1 2 1 2.4 15 ZeroCERT

14096 2021-10-27 10:24 stanzx.exe  

810a82f75517c167b50617cd983ba22a


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Browser ComputerName crashed 		1 7.6 26 ZeroCERT

14097 2021-10-27 10:25 csrss.exe  

24c4b3e55ca7f7cbd70f48c1f3ea3448


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 2.8 28 ZeroCERT

14098 2021-10-27 10:27 vbc.exe  

980c080857ff5a30b52a62d8649042da


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		8 17 1 8.0 29 ZeroCERT

14099 2021-10-27 10:28 done.exe  

83a00ad620a300149c0f6b9c3791f821


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		4 8 1 5.8 20 ZeroCERT

14100 2021-10-27 10:28 guide-1763783064.xls  

b3e7cae9729b0aff260863e5c19730b3


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		4 7 3 4.0 guest

keyword