popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14236 2021-10-29 09:10 Mfile.exe  

674fb73b1fd08e6778e47debcb1c3a6c


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		3 6 1 5.8 20 ZeroCERT

14237 2021-10-29 09:11 .csrss.exe  

0a7a0226b591a93d521911b140c0ba11


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 6 1 14.2 M 20 ZeroCERT

14238 2021-10-29 09:13 crocin.exe  

db030d5044011041bfb6d1a919337459


Themida Packer PE64 PE File VirusTotal Malware unpack itself Windows crashed 		2.8 32 ZeroCERT

14239 2021-10-29 09:13 maxi.exe  

1bcd242e21181da424e62eba71f13e1d


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		3 7 1 5.8 23 ZeroCERT

14240 2021-10-29 09:14 pub3.exe  

dc0d13a11537c91ee0436e1cdaaef2ed


Generic Malware Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 30 ZeroCERT

14241 2021-10-29 09:17 dllhost.exe  

fdebcac35105439faeecb9658e617a8c


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		1 3 1 8.0 21 ZeroCERT

14242 2021-10-29 09:19 vbc.exe  

1d03eee90db5e3881e7111490bd0d76d


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.4 16 ZeroCERT

14243 2021-10-29 09:21 vbc.exe  

0c8a26b69495724a46d7299ed9a8dd69


RAT PWS .NET framework Generic Malware DNS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName crashed 		11.2 16 ZeroCERT

14244 2021-10-29 09:24 pig.dll  

5adaaad9852f8358aeeb367f1cd26b76


Emotet Gen1 Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 5 4 8.6 39 ZeroCERT

14245 2021-10-29 09:27 ss.exe  

b2ae544b04a0936cd1ac3ca6783cf134


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 3 7 13.8 42 ZeroCERT

14246 2021-10-29 09:27 vbc.exe  

cb37241bc90fefcc0d61becffbe4d1ce


Loki NSIS Generic Malware Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 10 1 10.4 M 29 ZeroCERT

14247 2021-10-29 09:29 trze3v.tar  

8c6258bd9f567fed899aeb3f68aaa861


Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.4 15 ZeroCERT

14248 2021-10-29 09:31 ss.exe  

be4f9863a63917e9e55cf5350c617363


RAT Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		16 21 1 8.6 23 ZeroCERT

14249 2021-10-29 09:32 kon.exe  

d013f086c852f0855b884b09d6273894


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		9.8 23 ZeroCERT

14250 2021-10-29 09:34 out.exe  

671eb2b7682de507f36f6d57ca812b1c


RAT Generic Malware UPX AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself ComputerName 		18 20 1 10.8 40 ZeroCERT

keyword