popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14296 2023-03-23 18:39 ComPlusMethone.exe  

cf52142e72a8cae6f9f667b19d098459


PWS .NET framework RAT Anti_VM Malicious Packer .NET EXE PE32 PE File VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself 		4.4 M 29 ZeroCERT

14297 2023-03-23 18:39 NetSySCLI.exe  

367030209dfe9a7f1631b8edad37cfa3


PE64 PE File VirusTotal Malware DNS 		1 3.0 M 57 ZeroCERT

14298 2023-03-23 18:33 A1.exe  

f45a24c4f95ebc9c77e61344b65872f2


RAT UPX OS Processor Check .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.6 M 54 ZeroCERT

14299 2023-03-23 18:32 BypassUAC.exe  

f1171757917bda367914537dec2e5ef2


RAT UPX Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 M 41 ZeroCERT

14300 2023-03-23 18:31 cipher.exe  

a1a1af51bcab4d2f25637f6aa32ab493


RAT UPX OS Processor Check .NET EXE PE32 PE File VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted WMI ICMP traffic unpack itself Check virtual network interfaces IP Check Tofsee Windows Discord ComputerName DNS 		2 6 4 8.6 M 44 ZeroCERT

14301 2023-03-23 18:30 fotocr.exe  

86b64b82769fd641a3664ee102cd2f60


UPX Malicious Library OS Processor Check PE32 PE File PDB unpack itself Remote Code Execution 		1.2 M ZeroCERT

14302 2023-03-23 18:29 ConPtyShell.exe  

ce43d05a16369e03f1ee9e997bce44f6


RAT UPX Malicious Packer Antivirus .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself DNS 		1 2.4 M 36 ZeroCERT

14303 2023-03-23 18:28 NRATNew.exe  

ca6a4db4964f4475bed525178ad92f0c


RAT Malicious Packer .NET EXE PE32 PE File GIF Format VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself AppData folder Windows ComputerName Cryptographic key keylogger 		2 7.6 M 52 ZeroCERT

14304 2023-03-23 18:27 creal.exe  

2120b49043ad53c0a73cbf60bc110f8e


Gen1 Emotet Generic Malware UPX Malicious Library Anti_VM Malicious Packer Admin Tool (Sysinternals etc ...) OS Processor Check PE64 PE File DLL ZIP Format VirusTotal Malware Check memory Creates executable files 		2.0 23 ZeroCERT

14305 2023-03-23 18:27 nettaskcipher.exe  

64557121d459383777f4c4f5c611e59b


RAT Generic Malware UPX Antivirus OS Processor Check .NET EXE PE32 PE File VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key 		2 6 3 10.6 M 53 ZeroCERT

14306 2023-03-23 18:25 g02.exe  

9f488e91936c3e39d4c8d9923d067cf6


PWS .NET framework RAT UPX .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.4 6 ZeroCERT

14307 2023-03-23 18:24 rumf61h.exe  

0fba69e599437eb61d2abc86569621be


RedLine stealer[m] UPX Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 10.0 50 ZeroCERT

14308 2023-03-23 15:26 Pass_1234_Setup.rar  

37262ca3a1d563877f4324ee75b6facb


PWS[m] KeyLogger Escalate priviledges AntiDebug AntiVM Malware download Malware RecordBreaker suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Stealer Windows DNS 		10 1 5 3.8 ZeroCERT

14309 2023-03-23 13:30 vbc.exe  

d26e9a9ca834081f9decb5cdb0c10065


PWS .NET framework RAT Generic Malware Antivirus SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		1 2 5 15.0 M 36 ZeroCERT

14310 2023-03-23 13:27 19...............................  

8be240ea9814810a1c8a8754595b28b5


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic RWX flags setting exploit crash IP Check Windows Exploit DNS DDNS crashed keylogger Downloader 		2 4 12 5.4 M 31 ZeroCERT

keyword