popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14221 2021-10-28 18:12 P.O#2456hanger.exe  

6786ba299e0224069b0f695b924c9df0


AgentTesla(IN) Generic Malware Malicious Packer Malicious Library UPX PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		2.4 48 ZeroCERT

14222 2021-10-28 18:14 Payment_Receipt_ 1791.xls  

c2889891f65e5dec8038d662a03bb2a5


VBA_macro Generic Malware MSOffice File VirusTotal Malware RWX flags setting unpack itself 		1.4 13 ZeroCERT

14223 2021-10-28 18:15 SecuriteInfo.com.Variant.Razy....  

617b1fd1bfdab72e5562c0c2f7600bcb


Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.6 28 ZeroCERT

14224 2021-10-28 18:20 bghost.exe  

83754fa016cb31ea372d1b3f6c34708d


UPX PE64 PE File VirusTotal Malware AutoRuns Malicious Traffic Windows 		2 2 1 4.6 38 ZeroCERT

14225 2021-10-28 18:24 vbc.exe  

9980e7e39379cbe367adf3b7443dd319


Malicious Library UPX PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Tofsee Windows DNS crashed 		9 18 2 2 9.6 M 13 ZeroCERT

14226 2021-10-28 18:26 Payment_Receipt_ 1791.xls  

c2889891f65e5dec8038d662a03bb2a5


VBA_macro Generic Malware KeyLogger ScreenShot AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection unpack itself 		2.6 13 ZeroCERT

14227 2021-10-29 07:36 vbc.exe  

1b4af97e5bb29267e445511854e12b87


Loki PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 1 12.4 M 19 ZeroCERT

14228 2021-10-29 07:36 invc_0070032233.wbk  

cf62058e0e077981fa8535c0d47f12ea


RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Tofsee Windows Exploit DNS DDNS crashed Downloader 		4 10 8 6.4 27 ZeroCERT

14229 2021-10-29 07:43 rundll32.exe  

ad0e9142963cac524f3474d8f9b90a4f


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		18 16 2 10 8.8 M 22 ZeroCERT

14230 2021-10-29 07:43 InvoicePO102IndexLtdParamout.e...  

dc738e765ddc4e0a9663ca40239b7df9


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		8.8 24 ZeroCERT

14231 2021-10-29 07:56 vbc.exe  

8341a43885eb6960bd658ba5a1c8b84d


Malicious Library UPX PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Tofsee Windows DNS DDNS crashed 		3 9 2 11.0 24 ZeroCERT

14232 2021-10-29 09:06 .lsass.exe  

f6741a7f14669cbb4dffc16029381a91


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process AppData folder WriteConsoleW VMware anti-virtualization Windows ComputerName Cryptographic key Software crashed 		2 5 1 16.2 24 ZeroCERT

14233 2021-10-29 09:06 c8u1msi.jpg  

2215b04e57387c4925aff75b65ce2fca


Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.4 13 ZeroCERT

14234 2021-10-29 09:08 oit9ql.jpg  

0cfb719775ab7f2be4454602e6a51d90


Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.4 15 ZeroCERT

14235 2021-10-29 09:08 .wininit.exe  

4f811d4d3659bf698a270ebea91dd3ed


Loki PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		2 2 7 1 12.8 17 ZeroCERT

keyword