popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14311 2023-03-23 13:25 Firefox1.exe  

77d8ff584c4a6be6e927107aa7aa813b


Malicious Library PE32 PE File VirusTotal Malware PDB Check memory unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		1 1 3.8 M 47 ZeroCERT

14312 2023-03-23 13:24 vbc.exe  

92be4d14e97f691d1a23454035deca30


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		22 24 2 17 4.4 M 34 ZeroCERT

14313 2023-03-23 13:23 vbc.exe  

047f4584d2662d20bbb4c7b48cb1523a


PWS .NET framework RAT Hide_EXE SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 13.0 M 32 ZeroCERT

14314 2023-03-23 13:20 unknown.exe  

ab2185234d407de7d8d03041e7c3a488


RAT UPX Malicious Library Antivirus OS Processor Check .NET EXE PE32 PE File suspicious privilege MachineGuid Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName keylogger 		3.2 M ZeroCERT

14315 2023-03-23 13:19 vbc.exe  

d4908996778bfe1127a10b8db2741e88


PWS .NET framework RAT Generic Malware UPX OS Processor Check .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName DNS 		1 3.8 M 26 ZeroCERT

14316 2023-03-23 13:19 vbc.exe  

ca62a1b8f19765c9dab034741c463aed


UPX Malicious Library PE32 PE File OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 8.8 M 41 ZeroCERT

14317 2023-03-23 13:16 Downloader.exe  

75d45ac139ac9630ef44d1952e574633


PE32 PE File Malware download VirusTotal Malware AutoRuns Malicious Traffic Creates executable files RWX flags setting AppData folder Windows Remote Code Execution DNS Downloader 		2 1 7 5.0 M 59 ZeroCERT

14318 2023-03-23 13:15 529f38_9aa2021e548e4d6ea92f285...  

cd265d216aa729b1051f8631185f3520


ZIP Format Word 2007 file format(docx) VirusTotal Malware unpack itself Tofsee 		2 4 3 1 2.2 M 16 ZeroCERT

14319 2023-03-23 13:14 svchost.exe  

a8a106555b9e1f92569d623c66ee8c12


UPX Malicious Library Malicious Packer OS Processor Check PE32 PE File VirusTotal Malware DNS 		1 3.6 M 51 ZeroCERT

14320 2023-03-23 13:13 rocheleb4.1.exe  

78a95a8cb18e37d6565520be5e8013c4


UPX Malicious Library PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		3 8 1 4.8 M 25 ZeroCERT

14321 2023-03-23 13:12 vil.exe  

bc8579d75cae5223ed53f34e037b2eaa


PWS .NET framework RAT Hide_EXE SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		10.4 M 37 ZeroCERT

14322 2023-03-23 13:10 buil.exe  

495ce8bc963f4b0d156e4b7e5ed97ed4


PWS .NET framework RAT .NET EXE PE32 PE File VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 M 48 ZeroCERT

14323 2023-03-23 13:10 clip.exe  

8d3942d2bfaf962a1177aee8d08ca079


PE32 PE File VirusTotal Malware Telegram AutoRuns MachineGuid buffers extracted Check virtual network interfaces Windows DNS 		2 2 4.6 M 26 ZeroCERT

14324 2023-03-23 13:08 world.exe  

f8e0e6946af017037e8bb4d5455d4e99


PWS .NET framework RAT UPX Confuser .NET OS Processor Check .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6.2 M 47 ZeroCERT

14325 2023-03-23 13:07 LowesDistillery.exe  

f0a2d9e0876b2de2d5f5b7936a299e9f


Malicious Library PE32 PE File VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 M 57 ZeroCERT

keyword