popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14536 2021-11-04 15:09 ww_testFS_0211_single.exe  

4ea672ca05b3c1e7d131ecc108c7e7f1


RAT Gen1 Generic Malware Malicious Library UPX Malicious Packer ASPack PE File OS Processor Check PE32 PE64 DLL Browser Info Stealer Malware download VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities Disables Windows Security Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW IP Check Tofsee Windows Browser ComputerName DNS crashed 		23 38 10 3 16.4 M 23 ZeroCERT

14537 2021-11-04 15:09 1363_1635939325_5752.exe  

76fb65cb412e236329eee2be0c0a0a24


PE File PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Collect installed applications installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		1 5.2 29 ZeroCERT

14538 2021-11-04 15:10 ww_testLL_0211_single.exe  

8ac9ae1dd3a33406003c4456359a9db4


RAT Gen1 Generic Malware Malicious Library UPX Malicious Packer ASPack PE File OS Processor Check PE32 PE64 DLL .NET EXE Browser Info Stealer Malware download Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Disables Windows Security Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW IP Check Tofsee Windows Browser ComputerName DNS crashed 		25 40 11 3 14.2 M ZeroCERT

14539 2021-11-04 15:11 VPN.exe  

eabc4d9d7c67dc8e66b07d3976528e19


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself DNS 		1 2.8 32 ZeroCERT

14540 2021-11-04 15:14 docs  

9860743c4ff83784de05aa8444594aed


Malicious Packer PE File PE32 Malware Checks debugger Creates executable files Windows DNS 		2 3 2 2.0 ZeroCERT

14541 2021-11-04 15:15 search_hyperfs_204.exe  

04571dd226f182ab814881b6eaaf8b00


Malicious Library UPX Create Service Escalate priviledges DGA Socket Steal credential DNS Internet API Code injection Sniff Audio HTTP KeyLogger FTP Downloader ScreenShot Http API P2P AntiDebug AntiVM PE File OS Processor Check PE32 DLL VirusTotal Malware PDB suspicious privilege Code Injection Check memory WMI unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName Remote Code Execution DNS 		2 7.2 48 ZeroCERT

14542 2021-11-04 15:16 6478_1635886410_99.exe  

aa274b420a15cdb8384906a3c45a6d22


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		3.0 41 ZeroCERT

14543 2021-11-04 15:18 setup.exe  

bab66a1efbd3c6e65c5a6e01deea8367


Emotet Gen2 Formbook RAT PWS .NET framework Gen1 Eredel Stealer Extended njRAT backdoor Loki[b] Loki.m Generic Malware Malicious Library UPX Malicious Packer ASPack Admin Tool (Sysinternals etc ...) PE File PE32 DLL OS Processor Check MSOffice File PE Malware download VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key crashed 		18 11 5 10.2 6 ZeroCERT

14544 2021-11-04 15:20 max.exe  

a6546e2648aeb1504f1254e90881cfcd


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		9.6 23 ZeroCERT

14545 2021-11-04 15:22 clapp.exe  

fd9373daf6836a58961b12ef430e34d6


Malicious Library UPX AntiDebug AntiVM PE File OS Processor Check PE32 Browser Info Stealer VirusTotal Malware PDB Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications installed browsers check Windows Browser ComputerName Remote Code Execution DNS Cryptographic key crashed 		1 1 11.0 27 ZeroCERT

14546 2021-11-04 15:26 Softw75TradingB26345.exe  

080f4eb3d7c6c3a2bd561157e5bca410


RAT Generic Malware PE File PE32 .NET EXE VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder Tofsee 		9 4 1 7 6.4 M 27 ZeroCERT

14547 2021-11-04 15:27 asdfg.exe  

2df827a178fcfa149a64046339868665


PWS Loki[b] Loki.m RAT Gen1 Generic Malware UPX Malicious Packer Steal credential ScreenShot Http API Socket DNS Internet API HTTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check DLL Malware download Azorult VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself AppData folder malicious URLs suspicious TLD Tofsee Windows ComputerName DNS Cryptographic key crashed 		7 8 6 15.8 27 ZeroCERT

14548 2021-11-04 15:27 pub33.exe  

cafd9451b6821b63e44bcc315c4f2456


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution DNS 		1 1 3.2 26 ZeroCERT

14549 2021-11-04 15:30 askinstall42.exe  

1512b62ff17cb4687925a5f24b3afd88


AgentTesla Gen2 Trojan_PWS_Stealer BitCoin browser info stealer Credential User Data Generic Malware Google Chrome Malicious Packer Malicious Library SQLite Cookie UPX Create Service DGA Socket Steal credential DNS Internet API Code injection S Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Tofsee Windows Exploit Browser ComputerName Remote Code Execution crashed 		2 4 1 1 10.4 M 44 ZeroCERT

14550 2021-11-04 15:30 svchost.exe  

8b1011bf4b9dc38d8aececd4ed9e11c6


RAT Generic Malware Malicious Library UPX Create Service Socket DNS Code injection KeyLogger Escalate priviledges BitCoin ScreenShot AntiDebug AntiVM PE File OS Processor Check PE32 PE64 VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Auto service Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution Firmware 		2 7 2 16.0 43 ZeroCERT

keyword