popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14266 2021-10-29 09:53 loader1.exe  

d2664cef24240dc8eb16f39c37228757


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder suspicious TLD DNS 		26 27 5 6.8 30 ZeroCERT

14267 2021-10-29 09:54 FiCas AG Job Description.lnk  

3c324706e3bae0b7187b134a813011cb


Generic Malware Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P AntiDebug AntiVM GIF Format VirusTotal Malware Code Injection Check memory Creates shortcut RWX flags setting Check virtual network interfaces suspicious process malicious URLs Tofsee Interception 		2 4 1 5.0 20 ZeroCERT

14268 2021-10-29 09:56 InvoicePO102Indexparamout.exe  

1ed03bf8277e77c921aaba41343b9368


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.6 19 ZeroCERT

14269 2021-10-29 10:02 temp.dll  

cd3e23cddeb92b7397eaf960da34c237


PE64 PE File DLL VirusTotal Malware Check memory ICMP traffic unpack itself Windows utilities WriteConsoleW Windows 		3.4 12 ZeroCERT

14270 2021-10-29 10:04 SilentClient.exe  

2b0d06e1d3523e021ae6df87589d564c


Generic Malware Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware DNS 		1 3.0 45 ZeroCERT

14271 2021-10-29 10:08 temp.dll  

1788ff60c96f28ec0386a838edaa48fb


Malicious Library UPX PE64 PE File OS Processor Check DLL VirusTotal Malware unpack itself 		1.0 2 ZeroCERT

14272 2021-10-29 10:10 hta.hta  

d12cde9ca145f75251c08af9cef0b7f3


NPKI AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		4.2 1 ZeroCERT

14273 2021-10-29 10:50 hta.hta  

d12cde9ca145f75251c08af9cef0b7f3


NPKI AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 4.2 1 ZeroCERT

14274 2021-10-29 11:04 stash-266322727.xls  

6ad4c6c9e7f2a68596dc2c7cc7af10a8


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 3.6 guest

14275 2021-10-29 11:06 stash-266976238.xls  

9c6aa1a04e32f40f6f0c0206a5f9a0b1


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 3.6 guest

14276 2021-10-29 14:16 pop-up_excel_calendar_setup.ex...  

aa1966419284a4a503c101bd7db7a2a0


RAT PWS .NET framework Gen1 Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE File OS Processor Check PE32 .NET EXE PE64 DLL GIF Format VirusTotal Malware MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Browser ComputerName 		7.0 3 guest

14277 2021-10-29 15:03 temp.dll  

cd3e23cddeb92b7397eaf960da34c237


TA551 BazarLoader PE64 PE File DLL VirusTotal Malware Check memory ICMP traffic unpack itself Windows utilities WriteConsoleW Windows 		3.4 14 r0d

14278 2021-10-29 16:40 23410028317313.tgz  

00ec9a97b93697a509ef1123e0b5704c

VirusTotal Malware 		0.6 11 guest

14279 2021-10-29 16:53 23410028317313.exe  

f6b2bced4580a167eae96eb2c8501670


RAT Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName crashed 		9.8 20 guest

14280 2021-10-29 17:50 .csrss.exe  

c2c509a61a1d811d29ade6067e54c011


PWS Loki[b] Loki.m RAT Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 1 12.2 14 ZeroCERT

keyword