popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14956 2021-11-05 09:16 rundll32.exe  

6af950e3c2e81254bbc9f33f84c919d7


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		7 14 2 7 8.2 M ZeroCERT

14957 2021-11-05 09:16 191.exe  

0b30f73b686a32ee8091b29e8617db7e


RAT Generic Malware Malicious Library UPX PE File OS Processor Check PE32 PE64 VirusTotal Malware PDB MachineGuid Check memory Checks debugger Creates executable files unpack itself DNS 		1 3.2 18 ZeroCERT

14958 2021-11-05 09:16 pafile.exe  

263de141831b47e8033d3f624c18506c


Malicious Library UPX PE File OS Processor Check PE32 PDB unpack itself Remote Code Execution DNS 		2 2.0 ZeroCERT

14959 2021-11-05 09:17 chrome.exe  

bd1348111aebafff0e409c1b2103be2f


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself DNS 		9 25 2 11.2 23 ZeroCERT

14960 2021-11-05 09:19 sdd.dll  

9cfd97227c5095d2efd4dd86688e04b0


Gen2 Gen1 Generic Malware Malicious Library UPX PE File OS Processor Check PE32 DLL PDB buffers extracted unpack itself Windows DNS Cryptographic key 		1 2.2 ZeroCERT

14961 2021-11-05 09:21 187.exe  

72f4779d8e2878b5aefb4fca91c7c5b0


RAT Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Check virtual network interfaces anti-virtualization Tofsee Windows ComputerName DNS Cryptographic key 		1 5 1 8.4 ZeroCERT

14962 2021-11-05 09:23 ConsoleApp16.exe  

519c77369218476103250e9d89e0db48


AgentTesla browser info stealer Generic Malware Google Chrome User Data Create Service Socket Code injection Sniff Audio KeyLogger Escalate priviledges Downloader AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key crashed keylogger 		2 11.4 23 ZeroCERT

14963 2021-11-05 09:23 kak.exe  

3b25bb47c77da6404c1b75133ccf2b1f


RAT Gen1 Gen2 Lazarus Family Emotet Trojan_PWS_Stealer Generic Malware Themida Packer UltraVNC Credential User Data Malicious Library UPX Malicious Packer ASPack Admin Tool (Sysinternals etc ...) Anti_VM Antivirus SQLite Cookie AntiDebug Ant Browser Info Stealer Malware download VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Disables Windows Security Checks Bios Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD sandbox evasion VMware anti-virtualization IP Check VM Disk Size Check installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed 		69 78 22 25.2 M 45 ZeroCERT

14964 2021-11-05 09:23 Cube_WW14.bmp  

7c53b803484c308fa9e64a81afba9608


RAT Gen1 Generic Malware Malicious Packer Malicious Library UPX ASPack PE File OS Processor Check PE32 .NET EXE PE64 DLL Browser Info Stealer Malware download VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Disables Windows Security Check virtual network interfaces AppData folder AntiVM_Disk suspicious TLD sandbox evasion IP Check VM Disk Size Check Tofsee Windows Browser ComputerName Remote Code Execution DNS crashed 		32 39 10 10 14.8 M 49 ZeroCERT

14965 2021-11-05 09:24 1323_1635962037_1167.exe  

036f4601b88c52668d279cf3fcce2a97


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 11 1 14.0 33 ZeroCERT

14966 2021-11-05 09:25 2939_1635967838_5945.exe  

b3d831056b7b55304a06d7e0bfafbd44


Gen1 RAT Gen2 [m] Generic Malware Themida Packer Generic Malware task schedule Anti_VM Malicious Library UPX Malicious Packer ASPack Steal credential ScreenShot Http API AntiDebug AntiVM PE File PE32 DLL OS Processor Check JPEG Format PE64 Malware download Raccoon VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency RecordBreaker Buffer PE MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Collect installed applications Detects VirtualBox Detects VMWare AppData folder AntiVM_Disk suspicious TLD WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Stealer Windows Browser Email ComputerName Firmware DNS crashed 		9 4 9 3 18.0 37 ZeroCERT

14967 2021-11-05 09:25 1302_1635887431_6241.exe  

a7194594cf6c6e4c5b683243caa5ca29


RAT Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		2 9.6 42 ZeroCERT

14968 2021-11-05 09:25 sefile3.exe  

243cfd8dcfcd15e22adaee76d4852471


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 51 ZeroCERT

14969 2021-11-05 09:27 socks.exe  

177f3023ad736fa45c52b45259175e70


SystemBC Malicious Packer Malicious Library PE File PE32 VirusTotal Malware AutoRuns unpack itself AntiVM_Disk VM Disk Size Check Windows DNS 		2 3.6 48 ZeroCERT

14970 2021-11-05 09:30 bypass.txt.ps1  

398676189544dc8480ecb361490f2c1d


Generic Malware Antivirus VirusTotal Malware powershell Malicious Traffic Check memory buffers extracted unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 1 1 5.4 14 ZeroCERT

keyword