popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14116 2021-10-27 13:39 vbc.exe  

c30565830025332db48b9f38ddb2ab3f


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 13.6 M 21 guest

14117 2021-10-27 14:02 66890294103.pdf  

fc78d2cdb494fd18e3b59dbf2b5ded11


PDF Suspicious Link PDF VirusTotal Malware unpack itself Windows utilities Windows 		2.0 15 guest

14118 2021-10-27 14:20 chromedriver.exe  

9e5141400fa79953543f744bac726cc8


Generic Malware Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 MSOffice File PDB unpack itself DNS 		4 1.8 guest

14119 2021-10-27 14:33 https://mega.nz/file/SwZT3KDa#...  

154e1d38545984d2ba0cef1e24f1e232


Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM MSOffice File Code Injection exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 3.8 guest

14120 2021-10-27 14:47 GOMAUDIOKORSETUP_NEW.EXE  

9f869aecfc2c65dc3a0c170ebcd4d429


Gen2 RAT Formbook Gen1 PWS .NET framework Emotet Eredel Stealer Extended njRAT backdoor North Korea NPKI Generic Malware Malicious Library UPX Admin Tool (Sysinternals etc ...) Malicious Packer ASPack Antivirus Anti_VM Socket Escalate priviledges ScreenSh VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion anti-virtualization VM Disk Size Check Tofsee Windows Browser Advertising ComputerName Firmware crashed keylogger 		59 52 4 18.4 7 guest

14121 2021-10-27 14:59 LOIC.exe  

e6fa3028cd03318496852718143d256f


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key 		3.0 M 58 JYC

14122 2021-10-27 15:40 Sample_20120351252_ISO_003729....  

c1f5b864b5ccde85fc6f84e2429cf03b


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 15.4 44 guest

14123 2021-10-27 17:15 inv_009000987.wbk  

18dd40cd43c42c1fb35bea3f13b4056a


RTF File doc VirusTotal Malware buffers extracted RWX flags setting 		2.4 28 ZeroCERT

14124 2021-10-27 17:44 inv_009000987.wbk  

18dd40cd43c42c1fb35bea3f13b4056a


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 3 13 4.8 28 guest

14125 2021-10-27 17:51 inv_009000987.wbk  

18dd40cd43c42c1fb35bea3f13b4056a


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 3 13 4.8 28 guest

14126 2021-10-27 17:54 inv_009000987.wbk  

18dd40cd43c42c1fb35bea3f13b4056a


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 3 13 4.8 28 guest

14127 2021-10-27 18:05 vbc.exe  

29700aaa1450d6b23716c12573ed0faa


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 24 ZeroCERT

14128 2021-10-27 18:05 GymManagementSystem.dll  

c3df5f1eadd40189c6519fa25addeab8


Generic Malware PE File PE32 .NET DLL DLL VirusTotal Malware PDB 		1.0 8 ZeroCERT

14129 2021-10-27 18:05 jb5wrmt56.rar  

f793cad74aae9dab113ac269b4aab998


Malicious Library UPX PE File OS Processor Check PE32 DLL PDB unpack itself crashed 		0.8 ZeroCERT

14130 2021-10-27 18:08 new_virus.exe  

84ec08ab0bc4e88c3cbaa0d211044685


AgentTesla(IN) RAT Generic Malware Malicious Packer Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		5.6 38 ZeroCERT

keyword