popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14296 2021-10-29 18:33 temp.dll  

388c3456276b8e6e9fa8a827c4f37a76


TA551 BazarLoader PE64 PE File DLL VirusTotal Malware Check memory ICMP traffic unpack itself Windows utilities Windows 		3.2 16 ZeroCERT

14297 2021-10-29 18:35 bypass.txt.ps1  

529abb09970a8b6464375da0613893ea


Generic Malware Antivirus VirusTotal Malware powershell Malicious Traffic Check memory buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 1 5.4 12 ZeroCERT

14298 2021-10-29 21:37 temp.dll  

1788ff60c96f28ec0386a838edaa48fb


Malicious Library UPX PE64 PE File OS Processor Check DLL VirusTotal Malware unpack itself WriteConsoleW crashed 		2.0 2 guest

14299 2021-10-30 11:41 nano6129.exe  

4c342f040ad8b94e4f814e1f62e488ed


Generic Malware Malicious Packer PE File PE32 .NET EXE Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 10.0 56 ZeroCERT

14300 2021-10-30 11:44 AsyncClient6121.exe  

4c2634725187d2ccebaaaf92b231a1f0


RAT PWS .NET framework Generic Malware task schedule Malicious Packer Malicious Library UPX Create Service DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Escalate priviledges Downloader ScreenShot Http API P2P A Malware download AsyncRAT Dridex NetWireRC TrickBot VirusTotal Malware AutoRuns Code Injection Windows utilities suspicious process AppData folder WriteConsoleW Kovter Windows ComputerName DNS DDNS 		2 3 5.2 44 ZeroCERT

14301 2021-10-30 11:46 ClientDC.exe  

71d66e7e53e0341af65a1510d4c2eb63


RAT PWS .NET framework Generic Malware Malicious Packer Antivirus Malicious Library UPX PE File OS Processor Check PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.6 42 ZeroCERT

14302 2021-10-30 12:03 0011.wbk  

6c4a4577b05acbeb2d7daecf27658d03


RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		25 22 7 6 5.4 M 29 ZeroCERT

14303 2021-10-30 12:05 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		22 17 1 6 8.4 22 ZeroCERT

14304 2021-10-30 14:56 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 22 guest

14305 2021-11-01 09:14 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 22 guest

14306 2021-11-01 09:18 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 22 guest

14307 2021-11-01 09:24 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		8.2 22 guest

14308 2021-11-01 09:43 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 22 guest

14309 2021-11-01 09:48 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 22 guest

14310 2021-11-01 09:52 vbc.exe  

1463a8e3cbd8b63c709495a91ff95506


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.2 22 guest

keyword