popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-04-30 09:48 cutscroll.png  

f5c29728fe1f4226a8dc603d788a0a6f


PE File OS Processor Check PE32 Dridex TrickBot Malware suspicious privilege Malicious Traffic buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 2 3 4.6 ZeroCERT

2 2021-07-27 18:01 downloaddocument.do  

8dd7c961c9cdbd69e9a5d86d7809fc50


Emotet Malicious Packer UPX Malicious Library PE32 OS Processor Check DLL PE File Dridex TrickBot VirusTotal Malware Report PDB suspicious privilege MachineGuid Malicious Traffic Checks debugger buffers extracted ICMP traffic RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		4 14 5 3 9.6 M 13 ZeroCERT

3 2021-07-28 09:45 porto.pdf.exe  

8dd7c961c9cdbd69e9a5d86d7809fc50


Emotet Malicious Packer UPX Malicious Library PE32 OS Processor Check DLL PE File Dridex TrickBot VirusTotal Malware Report PDB suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		4 12 5 3 8.8 M 21 guest

4 2021-08-01 09:30 downloaddocument.do  

c0e07efbb0dd361490426661fe992f6f


Emotet Malicious Packer UPX Malicious Library DLL PE32 PE File Dridex TrickBot VirusTotal Malware suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS 		4 3 2 3 5.8 M 14 ZeroCERT

5 2022-01-19 14:00 hBDR  

cbca79a4616d16f43d38d6da4e424e81


Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion ComputerName DNS 		13 6.4 M 12 ZeroCERT

6 2022-01-19 17:31 AxVZTvof0xPasb9nP  

a3bb2614f2dd81a4420b80f88ffc0dc8


Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion ComputerName DNS 		13 6.6 21 ZeroCERT

7 2022-01-19 17:35 28DnnQ  

8c845dc825ff1726c17890c0295bfd72


Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion ComputerName DNS 		13 6.4 M 19 ZeroCERT

8 2022-01-20 07:54 AxVZTvof0xPasb9nP  

81e77ccebc0c638812cd75368710b856


Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion ComputerName DNS 		13 6.6 21 ZeroCERT

9 2022-01-20 09:51 invoice.doc  

4925a10905e4df9d65e87afed2d77c45


Emotet Malicious Packer Malicious Library UPX PE64 PE File DLL VirusTotal Malware Check memory ICMP traffic RWX flags setting unpack itself Windows utilities WriteConsoleW Windows Remote Code Execution 		3.8 2 ZeroCERT

10 2022-01-20 10:07 image.png  

4925a10905e4df9d65e87afed2d77c45


Emotet Malicious Packer Malicious Library UPX PE64 PE File DLL VirusTotal Malware Check memory ICMP traffic RWX flags setting unpack itself Windows utilities WriteConsoleW Windows Remote Code Execution 		3.8 M 2 ZeroCERT

11 2022-01-21 10:14 HyMifM  

5e0566f6d637adbd87305470aa05d9db


emotet Emotet Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware Malicious Traffic Checks debugger ICMP traffic RWX flags setting unpack itself ComputerName Remote Code Execution DNS 		1 30 1 6.8 M 6 ZeroCERT

12 2022-01-24 09:32 pZMP  

855b6c7b8fd6d8d6ea5e6526b60c5e6f


emotet Emotet Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Malicious Traffic Checks debugger ICMP traffic RWX flags setting unpack itself Kovter ComputerName Remote Code Execution DNS 		1 30 8 1 7.4 M 32 ZeroCERT

13 2022-01-24 09:47 0XCIyatvv2fEO60  

af2501aafd182ef4e0d631a9d7c7e9a6


emotet Emotet Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Malicious Traffic Checks debugger ICMP traffic RWX flags setting unpack itself Kovter ComputerName Remote Code Execution DNS 		1 30 8 1 7.0 M 19 ZeroCERT

14 2022-01-28 08:04 1taimP6  

70f2b77936c892f51dbc79e8057f8d70


emotet Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Malicious Traffic Checks debugger ICMP traffic RWX flags setting unpack itself Kovter ComputerName Remote Code Execution DNS 		1 30 6 1 7.0 M 19 ZeroCERT

15 2022-01-28 11:01 c0s13I  

3c1362345e40253964c6c05363812cb3


emotet Malicious Packer Malicious Library UPX PE File OS Processor Check PE32 DLL Dridex TrickBot VirusTotal Malware Report Malicious Traffic Checks debugger ICMP traffic RWX flags setting unpack itself Kovter ComputerName Remote Code Execution DNS 		1 26 5 1 7.0 M 18 ZeroCERT

keyword