popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14116 2023-03-31 09:50 vbc.exe  

d9f11abb5fbd7478a8fe993cfe8aac52


PWS .NET framework Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 3 1 8.2 M 27 ZeroCERT

14117 2023-03-31 09:48 vbc.exe  

42ece834e9aa72f3ec352f6bd42ef4d1


PWS .NET framework SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 5 12.8 M 29 ZeroCERT

14118 2023-03-31 09:48 vbc.exe  

b7fe0283cdd93788a35df6f5b541dee5


PWS .NET framework .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.6 M 52 ZeroCERT

14119 2023-03-31 09:47 handdiy_3.exe  

2644502236f017d4c97825b0d24fc434


Gen2 Trojan_PWS_Stealer Credential User Data Generic Malware UPX Malicious Library SQLite Cookie Malicious Packer Anti_VM OS Processor Check PE32 PE File PNG Format Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Checks debugger WMI Creates executable files ICMP traffic exploit crash Windows utilities suspicious process suspicious TLD WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution DNS crashed 		1 5 5 11.2 M 51 ZeroCERT

14120 2023-03-31 09:47 vbc.exe  

441aa97af8ab929af47af76962584b02


PWS .NET framework Admin Tool (Sysinternals etc ...) AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		3 6 1 8.4 M 36 ZeroCERT

14121 2023-03-31 09:44 vgc.exe  

eebdd5b69b2fbe296a4e848b6ece83e7


RAT Generic Malware Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Windows ComputerName DNS Cryptographic key crashed 		1 5 1 12.4 M 36 ZeroCERT

14122 2023-03-31 09:44 vbc.exe  

339a80192eb65dd95541a88b690e54d5


Loki_b Loki_m PWS .NET framework Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 7 14.4 M 37 ZeroCERT

14123 2023-03-31 09:12 j64256db567bee7.61884750.js  

eab588bb7d0ebf0965e94bd4cb0dd539

crashed 		0.2 guest

14124 2023-03-31 09:11 j64256db56eb8b0.38998651.js  

cc0bc320186db25b23c297644f697bb6

unpack itself crashed 		0.6 guest

14125 2023-03-30 18:58 vbc.exe  

291a20fef6482b753cc6e9cc3d6bc292


UPX Malicious Library PE32 PE File VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself 		3.4 M 46 guest

14126 2023-03-30 16:51 vbc.exe  

92a24824d555bc8f4a947992d85027b0


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		26 24 2 19 4.4 M 35 ZeroCERT

14127 2023-03-30 16:51 vbc.exe  

291a20fef6482b753cc6e9cc3d6bc292


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself DNS 		21 21 3 17 6.0 M 46 ZeroCERT

14128 2023-03-30 16:43 lega.exe  

1a5f749669d8b3a12463fdf8b7cc3f83


RedLine stealer[m] Gen1 Emotet PWS .NET framework RAT NPKI RedLine Stealer Generic Malware UPX Malicious Library Antivirus Malicious Packer Admin Tool (Sysinternals etc ...) Confuser .NET SMTP PWS[m] AntiDebug AntiVM CAB PE32 PE File OS Processor Check .N Browser Info Stealer Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Ransomware Windows Update Browser Email ComputerName Remote Code Execution Trojan DNS Cryptographic key Software crashed Downloader 		11 13 10 24.6 M 36 ZeroCERT

14129 2023-03-30 16:42 clip64.dll  

6a4c2f2b6e1bbce94b4d00e91e690d0d


UPX Malicious Library Admin Tool (Sysinternals etc ...) OS Processor Check DLL PE32 PE File VirusTotal Malware PDB Checks debugger unpack itself 		2.0 M 42 ZeroCERT

14130 2023-03-30 16:40 vbc.exe  

a3b0daf59ad3e6d2e465ea72ea83c4e0


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Remote Code Execution DNS 		1 2.6 M 36 ZeroCERT

keyword