popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14476 2021-11-03 09:38 vbc.exe  

a81af331102829201d998ae29328d883


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		9 20 1 8.0 21 ZeroCERT

14477 2021-11-03 09:39 vbc.exe  

fc7595f0624a1cad2d0d8c2155065d67


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Software 		1 2 6 13.0 20 ZeroCERT

14478 2021-11-03 09:41 rundll32.exe  

0362c14d2b1389973027a71faa08d013


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		11 24 6.8 26 ZeroCERT

14479 2021-11-03 09:41 vbc.exe  

6a049652dccbc682444088a9c910abed


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 3.0 33 ZeroCERT

14480 2021-11-03 09:42 cc.exe  

857f6017b36866f5e47a835608b6377c


[m] Generic Malware Generic Malware task schedule Admin Tool (Sysinternals etc ...) Malicious Library UPX AntiDebug AntiVM PE File PE32 VirusTotal Malware Buffer PE Code Injection buffers extracted RWX flags setting unpack itself Windows utilities WriteConsoleW Tofsee Windows ComputerName crashed 		2 2 1 9.2 23 ZeroCERT

14481 2021-11-03 09:43 5010_1635873664_4193.exe  

60938dc1c7bc8a2bbab6b7dac4ac06b4


PE File PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 6.4 34 ZeroCERT

14482 2021-11-03 09:44 vbc.exe  

91fb23dcf91534e17f881f58d5aa746c


Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself Tofsee Windows crashed 		3 4 1 4.0 13 ZeroCERT

14483 2021-11-03 09:45 vbc.exe  

70b04062e5da53d02f8beda0bdeacb35


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		9.6 30 ZeroCERT

14484 2021-11-03 09:45 186.exe  

357d55e0c7821d2c4bbd26e92ee6a71b


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 36 ZeroCERT

14485 2021-11-03 09:50 index.php  

76f8db098c44eb289d6e98bb973219d5


Generic Malware Malicious Library UPX PE File OS Processor Check PE32 PDB unpack itself Remote Code Execution 		1.4 ZeroCERT

14486 2021-11-03 09:50 9313_1635861230_7991.exe  

faa81ed90ab9f9d0858effd276647670


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.8 37 ZeroCERT

14487 2021-11-03 09:51 vbc.exe  

594effa8099b0150fc62239293f7510f


Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 FormBook Emotet Malware download VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting unpack itself Tofsee Windows crashed 		18 30 3 3 8.8 M 35 ZeroCERT

14488 2021-11-03 09:52 RFQ_ref-0555017803309010.exe  

c398ef0c8a4d040c905314fb38ed137b


RAT Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 3 14.6 29 ZeroCERT

14489 2021-11-03 09:52 vbc.exe  

d5dda7896090f45e89504fbd260dba84


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName Software 		1 2 6 14.4 20 ZeroCERT

14490 2021-11-03 09:54 vbc.exe  

3bb66afc2c9f8eb95d6b4eb9f0be3c60


Loki PWS Loki[b] Loki.m .NET framework Generic Malware DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.0 34 ZeroCERT

keyword