popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14401 2021-11-02 11:11 file.exe  

3139e939a60a693862671d6b13741d3b


Gen2 Formbook Generic Malware Malicious Library UPX PE File OS Processor Check PE32 MSOffice File JPEG Format VirusTotal Malware unpack itself Windows utilities suspicious process AppData folder WriteConsoleW anti-virtualization Ransomware Windows 		5.4 20 ZeroCERT

14402 2021-11-02 11:13 vbc.exe  

1bec7dd801cc1a898a1b345a192fb11f


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.6 25 ZeroCERT

14403 2021-11-02 11:14 sefile.exe  

64ffcd32bd5f7bbb7e456971e828b828


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 28 ZeroCERT

14404 2021-11-02 11:19 ConsoleApp9.exe  

6be4cc72830abef3c36f9d7057e2f6c9


PWS Loki[b] Loki.m RAT .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName 		1 5 1 3.4 45 ZeroCERT

14405 2021-11-02 11:21 sqlservr.exe  

8d412219be6c58284aa44787863e29cc


PWS Loki[b] Loki.m RAT .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 12.6 28 ZeroCERT

14406 2021-11-02 11:21 vcredist_2010.exe  

b118cd4261d84677a25e74b02aee6b5d


RAT PWS .NET framework Gen2 Gen1 Emotet Generic Malware NSIS Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Processor Check DLL .NET DLL MSOffice File GIF Format PE64 PNG Format VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Auto service Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check installed browsers check Windows Browser ComputerName DNS 		16 2 6 13.6 37 ZeroCERT

14407 2021-11-02 11:34 SETUP_A.EXE  

13fca45aea601df76b11c719c5425633


Generic Malware Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware AutoRuns PDB Check memory Creates executable files ICMP traffic Windows utilities Disables Windows Security suspicious process AppData folder sandbox evasion Windows Remote Code Execution 		1 2 1 8.4 32 ZeroCERT

14408 2021-11-02 11:37 sodomy.exe  

82cf57370e124c4813d271a271b602e3


Gen1 Gen2 Themida Packer Generic Malware Malicious Library UPX Anti_VM Malicious Packer PE File PE32 DLL PE64 VirusTotal Malware Check memory Creates executable files unpack itself Checks Bios Detects VMWare AppData folder VMware anti-virtualization Windows Firmware crashed 		6.6 28 ZeroCERT

14409 2021-11-02 11:38 pub3.exe  

220979c6ad45de9d933fc57a73840204


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 21 ZeroCERT

14410 2021-11-02 11:38 vcredist.exe  

28c5f954cd8979fb6edb52d086d38a25


RAT PWS .NET framework Gen2 Gen1 Emotet Generic Malware NSIS Malicious Library UPX Malicious Packer PE File PE32 .NET EXE OS Processor Check DLL .NET DLL MSOffice File GIF Format PE64 PNG Format Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Auto service Check virtual network interfaces suspicious process AppData folder AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check installed browsers check Windows Browser ComputerName DNS 		16 1 6 13.2 ZeroCERT

14411 2021-11-02 11:38 vbc.exe  

6536dd2dcc6e7e59e74988d69c565aab


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee crashed 		1 4 1 2.4 19 ZeroCERT

14412 2021-11-02 11:40 xs.exe  

e9680f9e3f58e0e087d82243b07ce93b


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.8 22 ZeroCERT

14413 2021-11-02 11:41 rfq_ref1006.exe  

7f961b43a8fe1463d59a76c597bc86f1


Emotet RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 14.6 20 ZeroCERT

14414 2021-11-02 11:42 RFQ_ref-020901006.exe  

6666c938fcf95127577f91f01882cae6


Emotet RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 14.6 26 ZeroCERT

14415 2021-11-02 11:43 sa.exe  

9d1ce1bf77fa0c73721fbd73269fc24b


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself ComputerName 		3 7 2 8.0 16 ZeroCERT

keyword