popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14371 2021-11-01 15:34 1.rtf  

847446bc1b6221de28dc78cef9d34623


Malicious Packer Anti_VM RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit crashed 		2 3.0 27 guest

14372 2021-11-01 16:24 1.rtf  

847446bc1b6221de28dc78cef9d34623


Malicious Packer Anti_VM RTF File doc VirusTotal Malware buffers extracted exploit crash unpack itself Exploit crashed 		2 3.0 27 guest

14373 2021-11-01 17:57 1.rtf  

847446bc1b6221de28dc78cef9d34623


Malicious Packer Anti_VM RTF File doc VirusTotal Malware 		1.2 27 guest

14374 2021-11-01 17:57 top.exe  

a065b00d113e42d89bcb0ef082862094


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB Remote Code Execution 		2.0 30 guest

14375 2021-11-01 17:58 instd.exe  

eea1c3d1ab9dd50b3dae826b35c8b138


Malicious Packer Malicious Library PE File PE32 VirusTotal Malware 		1.8 46 guest

14376 2021-11-01 17:59 instd.exe  

eea1c3d1ab9dd50b3dae826b35c8b138


task schedule Malicious Packer Malicious Library Code injection AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files unpack itself Windows utilities suspicious process sandbox evasion WriteConsoleW Windows ComputerName 		7.6 46 guest

14377 2021-11-01 18:00 instd.exe  

eea1c3d1ab9dd50b3dae826b35c8b138


Malicious Packer Malicious Library PE File PE32 VirusTotal Malware 		1.8 46 guest

14378 2021-11-01 18:21 pub3.exe  

2abbb910ba6b974e574842637c05dad6


Malicious Library UPX PE File OS Processor Check PE32 PDB Remote Code Execution 		1.0 ZeroCERT

14379 2021-11-01 18:21 open.exe  

dffc949523ddd2ac73b8a498979c836a


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB Remote Code Execution 		1.6 28 ZeroCERT

14380 2021-11-01 18:21 177.exe  

6093a7ccaec758a86ee4fb3bd81636db


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware 		0.8 23 ZeroCERT

14381 2021-11-01 18:22 180.exe  

e0f1da55d595ccd8fa30eb7488b71ca2


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware 		1.0 33 ZeroCERT

14382 2021-11-01 18:24 180.exe  

e0f1da55d595ccd8fa30eb7488b71ca2


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware 		1.0 33 ZeroCERT

14383 2021-11-01 18:25 screenshot.exe  

3ea0aeb40da1e753c6b9ce2981d25e51


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself suspicious TLD DNS 		18 17 5 2 9.8 30 ZeroCERT

14384 2021-11-01 18:28 180.exe  

e0f1da55d595ccd8fa30eb7488b71ca2


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE PE64 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications Check virtual network interfaces anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 13.6 33 ZeroCERT

14385 2021-11-01 18:29 pub3.exe  

2abbb910ba6b974e574842637c05dad6


Malicious Library UPX PE File OS Processor Check PE32 PDB unpack itself Remote Code Execution 		1.4 ZeroCERT

keyword