popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14491 2021-11-03 09:56 vbc.exe  

d0a58eae99dfb90ea4aa5dbf24d2fb93


Loki PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.4 16 ZeroCERT

14492 2021-11-03 10:00 vbc.exe  

11cbfa99fb5ebe8c09674e79b9834d96


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		13 26 1 5.8 26 ZeroCERT

14493 2021-11-03 10:02 vbc.exe  

c6def7e067895d7c6f4b0f78270b9e2c


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		15 26 2 7 5.8 M 27 ZeroCERT

14494 2021-11-03 15:07 vbc.exe  

c6def7e067895d7c6f4b0f78270b9e2c


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		15 31 1 4 5.8 M 27 ZeroCERT

14495 2021-11-03 16:41 proto-182171120.xls  

830c9b0719e54774e1642decdfcd69ee


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 5 2 3.6 guest

14496 2021-11-03 16:42 miss-1732825037.xls  

af175b239064b801b2fc6aa1f158ffc4


Downloader KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection unpack itself 		2.0 guest

14497 2021-11-03 16:46 miss-1732825037.xls  

af175b239064b801b2fc6aa1f158ffc4


Downloader MSOffice File ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		3 6 2 4.4 ZeroCERT

14498 2021-11-03 16:52 5332_1635879205_5518.exe  

4fb120e5975e3a7b4c59a1cf7b8ebc75


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.8 35 ZeroCERT

14499 2021-11-03 16:54 uux.exe  

bd4ef60928a0418f2f42958444a3ffc4


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1.6 15 ZeroCERT

14500 2021-11-03 16:57 snudutbimcg.exe  

8f0f115b34448e21ca751ad0ca7a5f73


RAT Generic Malware Antivirus PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 5 7.4 20 ZeroCERT

14501 2021-11-03 17:01 qa.exe  

068b5c216553c58c1068819bb8bd0195


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		20 27 2 5 8.0 27 ZeroCERT

14502 2021-11-03 17:07 autosubplayer.exe  

f4519ce450e18f453ace6c4b565cae94


Malicious Library UPX PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.8 22 ZeroCERT

14503 2021-11-03 17:07 soldd.exe  

eea8c7833f8322d29ff6c08a31ea8651


Generic Malware Antivirus PE File PE32 VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key Downloader 		2 2 1 10.0 46 ZeroCERT

14504 2021-11-03 17:17 sold.exe  

0ea242160e0b415f8a4713cbaba9e473


Generic Malware PE64 PE File VirusTotal Malware 		1.6 43 ZeroCERT

14505 2021-11-03 17:20 Amongus.exe  

df8c1f522f5a2032dfc62b7002810601


RAT Generic Malware UPX PE File PE32 .NET EXE VirusTotal Malware Telegram PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces WriteConsoleW IP Check Tofsee ComputerName DNS 		1 4 5 3.8 20 ZeroCERT

keyword