popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14161 2021-10-28 11:09 .vbc.exe  

0e03abdcfc2280af3abae47683c0368a


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder 		22 23 2 7.4 40 ZeroCERT

14162 2021-10-28 11:10 game.exe  

8a9095bb671979a0664b6736770d6847


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 32 ZeroCERT

14163 2021-10-28 11:11 DkkbXh.png  

a4c263e5e9079d9c5195e0182e127fcb


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 14 ZeroCERT

14164 2021-10-28 11:13 toolspab2.exe  

572807ee6e7da2e15d9873abd882ce30


Malicious Library UPX AntiDebug AntiVM PE File OS Processor Check PE32 VirusTotal Malware PDB Code Injection Checks debugger buffers extracted unpack itself Remote Code Execution 		7.4 33 ZeroCERT

14165 2021-10-28 11:13 csrss.exe  

cce4a440628be4103fe2c7a26e6dbf6b


Loki PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.8 24 ZeroCERT

14166 2021-10-28 11:15 vbc.exe  

df330ab2a2e5aa4ac947315ee3f93992


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 22 ZeroCERT

14167 2021-10-28 11:15 vbc.exe  

76a273a48d0d9e02adc29457e145f437


Loki NSIS Malicious Library UPX PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 1 10.4 M 29 ZeroCERT

14168 2021-10-28 11:17 126808361.exe  

8c957f8e5cc91f649891254901d6293c


PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6.2 28 ZeroCERT

14169 2021-10-28 11:18 oKwqQ.png  

edadfd868f1dd7590ec7c9581eaa146d


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 15 ZeroCERT

14170 2021-10-28 11:20 oWCwd.png  

22779bfc1d6843924f5e2875afbba259


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 14 ZeroCERT

14171 2021-10-28 11:22 vbc.exe  

66eaa64c0b3581cd9f183f9a1af0d33d


PWS .NET framework Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		13.2 22 ZeroCERT

14172 2021-10-28 11:22 alNtY.png  

ae4472036314048bcb8ed8c9c7b62446


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 14 ZeroCERT

14173 2021-10-28 11:22 new3.exe  

0edc34831b45eded59bd2aeef85aa41b


NSIS Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		15 29 1 2 5.8 28 ZeroCERT

14174 2021-10-28 11:24 po7cv1bb.tar  

2c9bae00aa5f17d0b9cfd75fcf7e05b7


Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.4 15 ZeroCERT

14175 2021-10-28 11:24 qYznSw.png  

e53a16bea7918b1f7d4c0e659febc766


Malicious Library PE File PE32 DLL VirusTotal Malware unpack itself Windows crashed 		2.2 14 ZeroCERT

keyword