popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14416 2021-11-02 11:44 .vbc.exe  

6117ec91b644303e86e5a9db8c6d9eea


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 20 ZeroCERT

14417 2021-11-02 11:45 AAAA.exe  

353bbe59184e2235c71991c24de394d9


Generic Malware Malicious Packer Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 VirusTotal Malware Check memory unpack itself ComputerName DNS 		1 2.6 17 ZeroCERT

14418 2021-11-02 11:46 23.exe  

e7287d94a2212da20e7e574102851645


Generic Malware PE64 PE File VirusTotal Malware 		1.2 28 ZeroCERT

14419 2021-11-02 11:47 RFQ_ref-02090100233.exe  

cbf1876a063270b217a80812e315aec3


Emotet RAT Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows ComputerName DNS DDNS 		1 3 2 11.8 31 ZeroCERT

14420 2021-11-02 11:49 ov.exe  

9c87428041d39d0be69711fa64cb4035


PWS Loki[b] Loki.m RAT Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 13.4 13 ZeroCERT

14421 2021-11-02 11:49 Softw75TradingB27534.exe  

58ecff4987136b922cc6d1dc523fd6d9


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces Tofsee 		3 7 1 4.8 22 ZeroCERT

14422 2021-11-02 11:51 maxfile.exe  

ed2ccc5a265e2b2ba9faf326349ce58e


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder Windows 		3 7 2 7.0 21 ZeroCERT

14423 2021-11-02 12:16 rundll32.exe  

2515726e608312c9ad0c845e53f0499c


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows 		6 12 1 4 10.2 M 19 ZeroCERT

14424 2021-11-02 12:16 vbc.exe  

c0225f76705c05744918c724e3018649


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		10 15 1 2 9.0 28 ZeroCERT

14425 2021-11-02 12:17 vbc.exe  

27966cb801b7c85686d6a5cf79dbb8ec


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 23 ZeroCERT

14426 2021-11-02 12:17 rewend.exe  

4cff82e973b1d0aa013a8d1fcdce9803


Themida Packer PE64 PE File VirusTotal Malware Windows crashed 		2.4 30 ZeroCERT

14427 2021-11-02 12:19 mix.exe  

863db22615785c834f8ac8ed325404e4


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.2 25 ZeroCERT

14428 2021-11-02 12:19 new.exe  

6bd8ecd283c51100366d205a8f3446d5


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder human activity check Windows ComputerName DNS DDNS 		3 1 10.4 30 ZeroCERT

14429 2021-11-02 12:21 vbc.exe  

e1b6b517ec229115f6c81d8a7ababe19


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 24 ZeroCERT

14430 2021-11-02 12:23 file.exe  

ebd30cc26cf38d0bf84f36d9715af9fd


RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		2.2 24 ZeroCERT

keyword