popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14446 2023-03-17 17:56 8.exe  

43fb0bb43cd8878e170066a86c57b8ca


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 33 ZeroCERT

14447 2023-03-17 17:56 DefenderSecurity.exe  

0fbf332153113f4b0dfd105244cba305


RAT .NET EXE PE32 PE File VirusTotal Malware DNS 		1 2.8 M 47 ZeroCERT

14448 2023-03-17 17:55 reycrytp.exe  

e5b2d160f8ba238317a89cd4ed6660b5


RAT task schedule UPX Malicious Library Malicious Packer AntiDebug AntiVM OS Processor Check .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself ComputerName DNS crashed 		1 10.8 M 29 ZeroCERT

14449 2023-03-17 17:54 7.exe  

de5666a98bc07594a7e963d1b41964e7


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 34 ZeroCERT

14450 2023-03-17 17:52 vbc.exe  

0d6f619554c6de06992c444d8b3c9a74


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware PDB 		1 1.4 M 20 ZeroCERT

14451 2023-03-17 17:51 ASDASD.exe  

38b7f433a65cdc9b846b3bff842c3bb1


RedLine stealer[m] Malicious Packer PWS[m] BitCoin AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 2 13.2 M 49 ZeroCERT

14452 2023-03-17 17:50 SecurityHelath_protected.exe  

1cf38074d1eec7ff196912f6b2d8c0c1


RAT Generic Malware task schedule Malicious Packer Antivirus AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		12.4 M 45 ZeroCERT

14453 2023-03-17 17:50 9.exe  

865f56a97781bcde44902cfe823d2f92


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 33 ZeroCERT

14454 2023-03-17 17:39 enes.exe  

843bab6d9df36499a5880621c9fd1cd8


RAT North Korea Generic Malware task schedule UPX Antivirus ScreenShot PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File GIF Format VirusTotal Malware Buffer PE AutoRuns PDB MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows ComputerName DNS 		1 12.2 M 32 ZeroCERT

14455 2023-03-17 17:37 10.exe  

ae120eba5b9a92de898ed5533151d400


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 33 ZeroCERT

14456 2023-03-17 17:36 vbc.exe  

52566f0ff46e8a99d07c8d4cb46b3ee8


PWS .NET framework RAT Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 14.8 M 25 ZeroCERT

14457 2023-03-17 17:34 RynMd_protected.exe  

d953ad5e538ade271c362c18b153a210


RAT Generic Malware Downloader task schedule Malicious Packer Antivirus Create Service DGA Socket ScreenShot DNS Internet API Code injection PWS[m] Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges FTP Http API AntiDebug AntiVM .NET EXE VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder WriteConsoleW Windows ComputerName Cryptographic key 		13.4 M 48 ZeroCERT

14458 2023-03-17 17:34 Bpznb.msi  

c39fec313f716b37b80ccf946ef5cc83


RAT Malicious Library OS Processor Check CAB MSOffice File VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check Windows ComputerName DNS 		8 1 3 4.0 M 4 ZeroCERT

14459 2023-03-17 17:32 5.exe  

3051107beffacf17a9b28d8328477485


Generic Malware Antivirus .NET EXE PE32 PE File PowerShell VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows Discord ComputerName DNS Cryptographic key Downloader 		1 2 3 10.0 M 28 ZeroCERT

14460 2023-03-17 16:31 vbc.exe  

52566f0ff46e8a99d07c8d4cb46b3ee8


PWS .NET framework RAT Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 15.8 25 guest

keyword