popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14356 2023-03-21 22:52 sample3.exe  

f1e85e3876ddb88acd07e97c417191f4


AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Check memory Checks debugger ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder Windows ComputerName crashed 		7.2 58 guest

14357 2023-03-21 21:23 window_61.data  

8e5c17aaaa222861615d346b2291810f


AntiDebug AntiVM Email Client Info Stealer suspicious privilege Checks debugger Creates shortcut unpack itself installed browsers check Browser Email ComputerName 		3.4 BRY

14358 2023-03-21 17:48 server.exe  

68d4bfeb87777e1c8766088077822341


Generic Malware UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Remote Code Execution 		2.0 27 ZeroCERT

14359 2023-03-21 17:36 photo_004.exe  

b93879979784a7ef5257c890e9d73f97


UPX Malicious Library OS Processor Check PE32 PE File PDB unpack itself 		1.0 ZeroCERT

14360 2023-03-21 17:26 Blotlg1NOUSE.vbs  

78a900693c638974a061a547f55ea676


Generic Malware Antivirus Remcos VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself suspicious process suspicious TLD anti-virtualization Windows ComputerName DNS Cryptographic key crashed 		3 5 2 8.4 M 1 ZeroCERT

14361 2023-03-21 17:25 Jubilets1.vbs  

d79593a6fb6c636a50334085b9d6018b


Generic Malware Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities suspicious process Windows ComputerName Cryptographic key crashed 		7.8 20 ZeroCERT

14362 2023-03-21 13:41 Lst.exe  

163d4e2d75f8ce6c838bab888bf9629c


Gen1 UPX Malicious Library Malicious Packer Anti_VM OS Processor Check PE64 PE File DLL ZIP Format VirusTotal Malware Check memory Creates executable files unpack itself crashed 		2.2 8 ZeroCERT

14363 2023-03-21 10:21 j6418a06081c941.29196432.js  

75293cec307cbd04d23b935d9b931194

crashed 		0.2 ZeroCERT

14364 2023-03-21 10:21 j6418a0613a7d18.89805382.js  

2e37b17c6a51dc28a37449055a305efa

unpack itself crashed 		0.6 ZeroCERT

14365 2023-03-21 10:19 photo_004.exe  

46748c64f38cbf845c1802db5b367ed2


Generic Malware UPX Malicious Library OS Processor Check PE32 PE File unpack itself Remote Code Execution 		1.2 M ZeroCERT

14366 2023-03-21 10:18 rw001ext.exe  

0ad8d4cffac5f713a2ef3b2c72a84e29


Gen2 Generic Malware UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself 		1.2 M 8 ZeroCERT

14367 2023-03-21 10:15 vbc.exe  

ca19b29e80779c0f9d74604b3d17940e


UPX Malicious Library PE32 PE File FormBook Malware download Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself 		18 19 3 17 3.4 M ZeroCERT

14368 2023-03-21 10:15 vbc.exe  

506b8329e83dc58c82c251756ca342b7


Loki Loki_b Loki_m PWS .NET framework Hide_EXE Socket DNS PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 13.6 M 34 ZeroCERT

14369 2023-03-21 10:13 photo_004.exe  

8c641e565b13fc56efdcd7658956accf


Generic Malware UPX Malicious Library OS Processor Check PE32 PE File unpack itself Remote Code Execution 		1.2 M ZeroCERT

14370 2023-03-21 10:11 man.exe  

87be1ac6122ed0c75b3af80696b9e686


PWS .NET framework Hide_EXE KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 11.6 M 31 ZeroCERT

keyword