popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14641 2023-03-14 09:30 ii.js  

1dc71c2cc5442d5aa65f23d8e5b86e95


crashed 		0.2 ZeroCERT

14642 2023-03-14 09:29 eatn.js  

2673f27962ec3428d2a6a10c5f7df171


unpack itself crashed 		0.6 ZeroCERT

14643 2023-03-14 07:44 GG18.exe  

46f4cfe6ef60deaa237d12e936905cd4


Loki Loki_b Loki_m PWS .NET framework RAT DNS PWS[m] AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software 		1 1 7 1 12.4 M ZeroCERT

14644 2023-03-13 17:56 purelog1.exe  

1fad42aeb237cb7c66f57a03a9689c0e


PE64 PE File VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		1 3.2 M 44 ZeroCERT

14645 2023-03-13 17:53 vbc.exe  

80e931736ae515aa4c63458e1bd9c7fb


RAT Generic Malware Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		1 3 1 1 11.4 M 39 ZeroCERT

14646 2023-03-13 17:50 hm...............................  

a0fdf8e2944577e63827431a287559ea


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted RWX flags setting exploit crash Exploit DNS crashed Downloader 		1 1 2 5.0 M 33 ZeroCERT

14647 2023-03-13 17:48 vbc.exe  

234310e8c8c038eb9e17fc11d97ec1d4


PWS .NET framework RAT Generic Malware Antivirus SMTP PWS[m] KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		13.0 M 47 ZeroCERT

14648 2023-03-13 17:47 vbc.exe  

1fb0cd15b8150e5dfb87c8c78e679612


PWS .NET framework Generic Malware Antivirus SMTP KeyLogger AntiDebug AntiVM .NET EXE PE32 PE File Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 2 1 17.8 M 35 ZeroCERT

14649 2023-03-13 12:22 blueloader.exe  

bc81b04299cda5fd5785caf50260dd29


.NET EXE PE32 PE File suspicious privilege Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key crashed 		2.2 ZeroCERT

14650 2023-03-13 10:01 serv.exe  

9162ab01ab22607f46d44291327aaf42


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Remote Code Execution 		2.2 M 34 ZeroCERT

14651 2023-03-13 09:59 vokka.exe  

be63aa025274e205b98a190c40f918c7


UPX Malicious Library OS Processor Check PE32 PE File VirusTotal Malware unpack itself Remote Code Execution 		1.8 M 29 ZeroCERT

14652 2023-03-13 09:58 qbittorrent.exe  

cb03a80bc17d2d81fd34aab4341e89eb


Gen2 Gen1 UPX Malicious Library Anti_VM Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware PDB MachineGuid Check memory unpack itself Ransomware 		2.6 1 guest

14653 2023-03-13 09:58 vbc.exe  

eb86a131d28521c31b5657a236514082


PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 4 2 1 10.8 M 43 ZeroCERT

14654 2023-03-13 09:55 installation.exe  

f9b6aa6b0694cc878ed1cc0f7f4c9e63


UPX OS Processor Check PE32 PE File Browser Info Stealer VirusTotal Malware Check memory buffers extracted unpack itself Browser DNS 		1 1 3.0 M 37 ZeroCERT

14655 2023-03-13 09:51 lega.exe  

5086db99de54fca268169a1c6cf26122


Generic Malware UPX Malicious Library Malicious Packer Antivirus Downloader Admin Tool (Sysinternals etc ...) OS Processor Check PE32 PE File MZP Format PE64 .NET EXE DLL Malware download Amadey VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Remote Code Execution DNS Cryptographic key crashed Downloader 		9 9 12 11.4 M 48 ZeroCERT

keyword