popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14251 2021-10-29 09:34 pd.exe  

c7b844578dca69166f414ea0c28e0384


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		4.8 17 ZeroCERT

14252 2021-10-29 09:34 bin.exe  

cf7c842dfbf541a670dc5bc914516847


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows Cryptographic key 		1 2 1 3.2 12 ZeroCERT

14253 2021-10-29 09:36 A540bo3mQDlYqpH30620D.exe  

781fb23a988efab21e4ab321aa932b09


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself ComputerName 		2.4 17 ZeroCERT

14254 2021-10-29 09:37 EgAXWEL.exe  

a21083e3799762685013f624ef688c60


Emotet NPKI Malicious Library UPX Anti_VM Create Service DGA Socket Steal credential DNS Internet API Hijack Network Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P persistence AntiDebug AntiVM PE File Browser Info Stealer Malware download VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check SectopRAT Windows Browser Backdoor ComputerName Remote Code Execution DNS Cryptographic key crashed 		1 4 1 16.6 16 ZeroCERT

14255 2021-10-29 09:38 ens.exe  

e38e18c6b8fc1f9abd0ed7ce9aa45fda


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 30 ZeroCERT

14256 2021-10-29 09:40 kontrol.exe  

ae2ab79ae3a03b8af8ca9aa7a3e9d445


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 10.0 33 ZeroCERT

14257 2021-10-29 09:40 vbc.exe  

ff1c94584214d5eef525a0d3ff196a8b


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		16 17 4 2 9.4 21 ZeroCERT

14258 2021-10-29 09:43 fed.exe  

e574ad4af9b6fc033fdf0b54ca7bf014


PWS Loki[b] Loki.m RAT Gen1 Gen2 Generic Malware Malicious Packer Malicious Library UPX Socket DNS Internet API HTTP KeyLogger ScreenShot Http API AntiDebug AntiVM PE File PE32 .NET EXE DLL OS Processor Check Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Ransomware Zeus Windows Browser Email ComputerName DNS Software 		1 1 3 18.0 23 ZeroCERT

14259 2021-10-29 09:44 vx.exe  

b8b06e334cfa1e325851a840065b6aa1


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		6 10 2 1 8.4 35 ZeroCERT

14260 2021-10-29 09:45 loader2.exe  

25f27297055176dde7fb735ee70eaa8f


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder 		12 22 2 7.0 25 ZeroCERT

14261 2021-10-29 09:45 eo.exe  

fb0d1d127da05d102f94ef77ab205875


PWS Loki[b] Loki.m RAT Generic Malware Socket DNS Internet API HTTP KeyLogger ScreenShot Http API AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Browser ComputerName DNS 		1 1 1 9.6 17 ZeroCERT

14262 2021-10-29 09:45 set.exe  

4d1524f643dfdc491de426572a7d38e6


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 11.4 M 31 ZeroCERT

14263 2021-10-29 09:47 os.exe  

95ba9d5a5cd05fec041a876e1e2b66b2


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 24 ZeroCERT

14264 2021-10-29 09:48 xso.exe  

257679d1ffeaa47dcea2491b13637e50


RAT Generic Malware UPX AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		3 7 1 8.2 22 ZeroCERT

14265 2021-10-29 09:53 Declaration of Asset.pdf.lnk  

47fe3905ba9f09a7b2d4fee3981e9f87


NPKI Generic Malware AntiDebug AntiVM GIF Format Code Injection Check memory buffers extracted Creates shortcut RWX flags setting unpack itself Check virtual network interfaces suspicious process AntiVM_Disk VM Disk Size Check Tofsee Interception DNS 		2 4 2 5.0 ZeroCERT

keyword