popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
136 2021-09-09 21:10 detalhes_atualizacao.doc  

a02cfacbf32e9ff66464de27faa58543


VBA_macro Generic Malware Antivirus MSOffice File VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut RWX flags setting unpack itself suspicious process Windows ComputerName DNS Cryptographic key 		1 10.0 34 ZeroCERT

137 2021-09-06 18:18 Users-Progress-072021-1.doc  

d60b6a8310373c9b84e6760c24185535


Generic Malware VBA_macro Admin Tool (Sysinternals etc ...) Malicious Packer MSOffice File VirusTotal Malware RWX flags setting unpack itself 		3.0 36 ZeroCERT

138 2021-09-06 08:42 0902_6686864155.doc  

b4095bc22ff3f27dd088852a49338c08


Generic Malware VBA_macro MSOffice File GIF Format VirusTotal Malware Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Check virtual network interfaces suspicious TLD IP Check ComputerName 		4 8 1 10.0 17 ZeroCERT

139 2021-09-06 08:39 0831_3314378773.doc  

ca29d350e363b21d507ba30cb65413ce


Generic Malware VBA_macro MSOffice File GIF Format VirusTotal Malware Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces suspicious TLD IP Check ComputerName 		4 8 1 9.2 12 ZeroCERT

140 2021-09-03 09:44 0902_7424105065.doc  

952ff03c89221d84c80a8414ca66be9c


Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 7.4 M guest

141 2021-09-03 09:42 0902_3251513311.doc  

ddf9b6207844d5b0bb83b88ecef0560a


Generic Malware VBA_macro MSOffice File GIF Format VirusTotal Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 8.2 M 22 guest

142 2021-09-03 09:39 0902_1465137480.doc  

f79439b84bf0fc6cf84274fb94fe9b40


Generic Malware VBA_macro MSOffice File unpack itself 		1.6 guest

143 2021-09-03 09:00 inv_1123.wbk  

2a468f175032ed01e5d4fecd511b8b0f


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Tofsee Windows Exploit DNS Cryptographic key crashed Downloader 		1 3 8 5.2 M 26 ZeroCERT

144 2021-09-02 18:21 who_template.doc  

3657586d8555593012bfd7420d488be4


Generic Malware VBA_macro MSOffice File VirusTotal Malware RWX flags setting unpack itself DNS 		1 1 1 2.8 20 ZeroCERT

145 2021-09-02 09:19 ..-.-...................------...  

98a92918a128f1f26d552bb3aaab2a61


RTF File doc AntiDebug AntiVM FormBook Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS crashed Downloader 		19 16 8 6 5.4 M 26 ZeroCERT

146 2021-09-02 07:54 invoice.wbk  

dd2f7b986cc840b4c4f9b03def8fcadd


RTF File doc AntiDebug AntiVM Malware download Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Tofsee Windows Exploit DNS Cryptographic key crashed Downloader 		1 3 8 4.4 ZeroCERT

147 2021-09-01 14:18 0831_8300668682.doc  

25d3ac93606e135f18e4e96887fa3a44


hancitor Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 1 7.4 M guest

148 2021-09-01 14:15 0831_4532643085.doc  

f25c56cf3b503d96df86b4bb2c39f479


Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 7.4 M guest

149 2021-09-01 14:14 0831_4435052411.doc  

004b4634de3991a6de6a2c756a83e6ff


Generic Malware VBA_macro MSOffice File unpack itself 		1.6 guest

150 2021-09-01 07:41 p.wbk  

9d2cc34c3b6319a79a8c32881c8759ec


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Tofsee Windows Exploit DNS Cryptographic key crashed 		1 3 9 5.2 24 ZeroCERT

keyword