popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14131 2023-03-30 16:38 white.exe  

89a133e7158e8bb6e2614a7c9bd7ff5d


NPKI Gen1 UPX Malicious Packer Malicious Library PE32 PE File OS Processor Check DLL Browser Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Creates executable files unpack itself Collect installed applications sandbox evasion anti-virtualization installed browsers check Windows Browser Email ComputerName DNS crashed 		8 1 3 7.2 7 ZeroCERT

14132 2023-03-30 16:34 xme.exe  

48efad145d5274859e353e1cf8018e45


Emotet RAT AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		10 12 2 9.4 M 44 ZeroCERT

14133 2023-03-30 16:33 vbc.exe  

921fba8af6c955c0fc7c8206e833bbe4


PWS .NET framework RAT Generic Malware Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 4 1 1 10.4 M 21 ZeroCERT

14134 2023-03-30 16:32 tmpBEB8.tmp.exe  

5aa405d35131a36ce1647c6937d3e529


PWS .NET framework RAT .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.8 M 28 ZeroCERT

14135 2023-03-30 16:29 25.....25.............doc  

2c5cf406f3e4cfa448b167751eaea73b


Loki MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 2 16 1 5.0 M 31 ZeroCERT

14136 2023-03-30 16:17 Stork.vbs  

8d4e3f96fb554ff1db02b999210126d6


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Windows utilities suspicious process Windows ComputerName DNS Cryptographic key crashed 		1 1 9.0 M 4 guest

14137 2023-03-30 16:03 Kionectomy1.vbs  

305ec8dca6e74b54c808d4796374676c


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process Windows ComputerName Cryptographic key crashed 		7.0 12 guest

14138 2023-03-30 09:23 info.pdf  

a05bb251aa7a4b93f443023a6b8c8b67


PDF ZIP Format Windows utilities Windows DNS 		5 1 2.0 M ZeroCERT

14139 2023-03-30 09:22 run.vbs  

530c052db1411cc1d2a9e37da4def497


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 6.0 15 ZeroCERT

14140 2023-03-30 09:21 1.exe  

88131cfd2cca21aba749fd591b04b45f


Generic Malware UPX Malicious Library Downloader Malicious Packer OS Processor Check PE32 PE File Remcos VirusTotal Malware Malicious Traffic Check memory Windows DNS keylogger 		1 4 1 4.0 50 ZeroCERT

14141 2023-03-30 09:21 2.exe  

d606a39261a0599154ba54ec565fd602


Generic Malware UPX Malicious Library Downloader Malicious Packer OS Processor Check PE32 PE File Remcos VirusTotal Malware Malicious Traffic Check memory Windows DNS keylogger 		1 4 1 4.0 52 ZeroCERT

14142 2023-03-30 09:17 vbc.exe  

a98f0fd7f830e6c6514d4b8cc9934743


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself 		18 19 3 17 5.2 M 37 ZeroCERT

14143 2023-03-30 09:16 try.hta  

7a8dd40f53d76872300fdba6b6429822


PWS .NET framework RAT Generic Malware Antivirus SMTP PWS[m] KeyLogger AntiDebug AntiVM PowerShell .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 3 10 21.0 20 ZeroCERT

14144 2023-03-30 09:14 putty.exe  

f0cbe408045d492ae41ee92ad7c39bea


PWS .NET framework RAT SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 5 13.2 14 ZeroCERT

14145 2023-03-29 23:31 DvDUsSet.exe  

65de52a852356f9e0aea8b43e67105f7


Confuser .NET .NET EXE PE32 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Ransomware DNS 		3 3 3.8 M 62 guest

keyword