popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14971 2021-11-05 09:30 vbc.exe  

221ee3fdee780aa3b465ae9c6c20560b


Loki PWS Loki[b] Loki.m Generic Malware UPX Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		2 2 7 1 13.6 26 ZeroCERT

14972 2021-11-05 09:31 vbc.exe  

2b12e8bec8e8469f62fd8469f5a8f417


RAT Generic Malware UPX AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS 		7 18 2 9.8 32 ZeroCERT

14973 2021-11-05 09:31 9801_1635938030_9423.exe  

a26c091f560286c77dc695818846a27e


RAT PWS .NET framework Gen1 Gen2 Generic Malware MPRESS UPX Malicious Packer Malicious Library ASPack PE File PE32 DLL .NET EXE OS Processor Check PE64 Malware download Raccoon VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency RecordBreaker Buffer PE MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates executable files unpack itself Checks Bios Collect installed applications Detects VirtualBox Detects VMWare AppData folder VMware anti-virtualization installed browsers check Tofsee Stealer Windows Browser Email ComputerName Remote Code Execution Firmware DNS crashed 		9 5 8 3 14.6 31 ZeroCERT

14974 2021-11-05 09:31 sefile2.exe  

38055b609cbc5df14fd86be301eb6397


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.6 23 ZeroCERT

14975 2021-11-05 09:34 YConsoleApp117all.exe  

b86c000007846c924e1f4a82a842686f


RAT Generic Malware task schedule Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Dridex TrickBot VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself suspicious process WriteConsoleW Kovter Windows ComputerName DNS Cryptographic key crashed 		5 1 12.0 31 ZeroCERT

14976 2021-11-05 09:34 nwamazx.exe  

22f934036d8405eaf679a08f51babbec


RAT PWS .NET framework Gen1 Generic Malware UPX Malicious Library Malicious Packer AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check DLL JPEG Format Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Phishing Cryptocurrency wallets Cryptocurrency PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder WriteConsoleW anti-virtualization installed browsers check OskiStealer Stealer Windows Chrome Browser Email ComputerName Password 		10 2 7 15.8 20 ZeroCERT

14977 2021-11-05 09:36 vbc.exe  

39da7ab7a964862e9005e9e38d9c7568


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger Creates executable files unpack itself AppData folder Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 9.2 28 ZeroCERT

14978 2021-11-05 09:36 ethm2305.exe  

ee30d6928c9de84049aa055417cc767e


Gen2 Formbook Generic Malware UPX Malicious Library PE File PE32 OS Processor Check Malware download VirusTotal Malware suspicious privilege MachineGuid buffers extracted WMI Creates executable files AppData folder sandbox evasion WriteConsoleW Tofsee Windows ComputerName DNS Downloader 		7 18 7 9.2 45 ZeroCERT

14979 2021-11-05 09:37 clp_wsfmvg.exe  

82ec554886de723258094e5509e76556


Emotet Gen1 RAT [m] Generic Malware Generic Malware task schedule Malicious Library UPX Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE64 PE File PE32 .NET EXE VirusTotal Malware AutoRuns PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder WriteConsoleW Tofsee Windows ComputerName Remote Code Execution DNS Cryptographic key 		1 3 1 15.2 17 ZeroCERT

14980 2021-11-05 09:38 5334_1636030207_6453.exe  

d32aed7204ae5bf456dc9d1be2c53d9e


RAT NPKI Generic Malware Antivirus Malicious Library UPX AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE Malware download NetWireRC VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AntiVM_Disk WriteConsoleW VM Disk Size Check DCRat Windows ComputerName Remote Code Execution DNS crashed 		1 1 1 9.8 38 ZeroCERT

14981 2021-11-05 09:39 vbc.exe  

ab47f89cf986d9e52822873e0052e7d4


Admin Tool (Sysinternals etc ...) Malicious Library UPX PE File PE32 VirusTotal Malware RWX flags setting unpack itself Tofsee crashed 		3 4 1 3.2 14 ZeroCERT

14982 2021-11-05 09:43 vbc.exe  

d06c38d984a2f6e270ff39ece951c090


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder DNS 		13 33 2 7.8 20 ZeroCERT

14983 2021-11-05 09:44 index-295687290.xls  

4309aadc0b51d58084832e45cba1e1dd


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 3.6 guest

14984 2021-11-05 09:46 index-294441975.xls  

294c6091ed8f9b30fabca946bc2e48ee


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 3.6 guest

14985 2021-11-05 10:43 watchdog.exe  

e0a50c60a85bfbb9ecf45bff0239aaa3


PE File PE32 VirusTotal Malware Creates executable files WriteConsoleW Trojan 		4.4 50 ZeroCERT

keyword