popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14521 2021-11-04 14:53 7576_1635862012_3623.dll  

628b068ebb6c34efd8b4d21d4f4c7723


PE64 PE File DLL IcedID Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Tofsee 		2 4 2 3.4 15 ZeroCERT

14522 2021-11-04 14:53 ww15_testLL_0310_single.exe  

d6fe99dda423f5d46e37e8b803c36394


RAT Gen1 Generic Malware Malicious Library UPX Malicious Packer ASPack PE File OS Processor Check PE32 PE64 DLL .NET EXE Browser Info Stealer Malware download VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Disables Windows Security Check virtual network interfaces suspicious process AppData folder suspicious TLD sandbox evasion WriteConsoleW IP Check Tofsee Windows Browser ComputerName DNS crashed 		23 41 11 3 16.0 M 25 ZeroCERT

14523 2021-11-04 14:54 zidem3  

e476378637d33f422cef86ca864dbbfc


Emotet Gen2 Gen1 Malicious Packer Malicious Library UPX PE64 PE File DLL Checks debugger buffers extracted unpack itself DNS crashed 		1 2.2 ZeroCERT

14524 2021-11-04 14:55 setup.exe  

3329dc6e93761fd9597063f368ea952c


Emotet RAT Gen1 Malicious Library UPX PE File PE32 PE64 DLL OS Processor Check Malware download VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder Windows ComputerName DNS crashed 		1 3 4 6.2 17 ZeroCERT

14525 2021-11-04 14:56 mm.exe  

03e95ad0249fb5036bbb4c3478542cbd


RAT Generic Malware PE64 PE File VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		2 3.4 44 ZeroCERT

14526 2021-11-04 14:56 90000747287171161449.exe  

05c3aa96ada8cb3d9f80ce44732329d8


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 25 ZeroCERT

14527 2021-11-04 14:58 fwerdsfkjxcvjksdfkkwefkdkfsfjk...  

9aa6aa141a72e6bdf7c94c6d9ec6393a


RTF File doc Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 6 4.0 28 ZeroCERT

14528 2021-11-04 14:59 csrss.exe  

20795e246cdfbeae65f0327b30e29e55


PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself 		5.2 23 ZeroCERT

14529 2021-11-04 15:01 vbc.exe  

9191670d633330ba6c57b6938c8bca01


Malicious Packer UPX PE File PE32 VirusTotal Malware RWX flags setting crashed 		1.8 27 ZeroCERT

14530 2021-11-04 15:01 clip.exe  

7f3928f07a5c02b94810216c0b792839


RAT PWS .NET framework BitCoin Generic Malware UPX Antivirus persistence AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE VirusTotal Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		11.2 41 ZeroCERT

14531 2021-11-04 15:03 EVA.exe  

199e59926813eba310c9c218c2d8c7bb


AgentTesla(IN) RAT Generic Malware Malicious Packer Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself Windows Browser Email ComputerName Cryptographic key crashed 		5.0 37 ZeroCERT

14532 2021-11-04 15:04 vhJA4tqSpiN6pEO.exe  

ce44d33b7dadb6c6f15cc7a4052e8dbf


RAT Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		8 17 1 9.0 25 ZeroCERT

14533 2021-11-04 15:08 3799_1635922365_1426.exe  

1bef6a1a0d0cdcb868aaa9fffd513f25


RAT Generic Malware PE64 PE File Browser Info Stealer VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself Collect installed applications Windows Browser ComputerName DNS Cryptographic key crashed 		2 5.8 21 ZeroCERT

14534 2021-11-04 15:08 wnresrv.exe  

1a0be1dd4745e67fdf94323f46789991


RAT PWS .NET framework Generic Malware Malicious Packer Malicious Library UPX PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Disables Windows Security Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 3 9.0 38 ZeroCERT

14535 2021-11-04 15:09 15673391590007385026.exe  

d57f5d014ef57dc1703d49f89d94856a


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 25 ZeroCERT

keyword