popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2020-07-16 17:42 http://www.megafile.co.kr/webh...  

64b3d8176d57912781321f74bbc64e89


VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		3 2 2 4.6 10

2 2020-07-16 17:47 http://www.megafile.co.kr/webh...  

64b3d8176d57912781321f74bbc64e89


Dridex VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Tofsee Windows Exploit Browser ComputerName DNS crashed 		3 3 5 12.6

3 2020-07-16 19:12 http://www.haeunkim.com/5626.e...  

f9329056c318c4b1be6931135dc76f9e


Emotet Dridex VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Disables Windows Security AppData folder malicious URLs Tofsee Windows Exploit ComputerName DNS Cryptographic key crashed 		9 9 14 11.4

4 2020-07-16 19:30 http://abass.ir/ugobuild/chuck...  

c469fab03c1ec27ab64b8b4fa35e3182


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory buffers extracted Creates executable files exploit crash unpack itself Windows utilities malicious URLs sandbox evasion installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Software crashed 		3 3 11 13.0 M 31

5 2020-07-17 09:59 http://filehon.com/app/Filehon...  

b7ea646522c23ec09c73ad415107faa1


Dridex VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Firewall state off installed browsers check Tofsee Windows Exploit Browser ComputerName DNS crashed 		2 3 5 12.0

6 2020-07-17 10:44 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware Code Injection Check memory Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		3 2 2 6.6

7 2020-07-17 10:54 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files ICMP traffic exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Windows Exploit Browser ComputerName DNS crashed keylogger 		8 4 3 15.0

8 2020-07-17 11:33 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		4 3 2 4.6

9 2020-07-17 11:37 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		4 3 2 4.6

10 2020-07-17 11:44 http://111.90.148.23/100720.do...  

7677a0501aa639d98781a5eb58a91324


VirusTotal Malware Code Injection Malicious Traffic unpack itself Windows utilities Tofsee Windows DNS 		3 2 4 4.2 M 16

11 2020-07-17 11:50 http://19workfineanotherrainbo...  


VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 1 2 3.8 M

12 2020-07-17 14:22 http://jdtrusttrading.org/4656...  

02bb1837b843f982b3a5c49aad515e10


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 2 16.2 M 33

13 2020-07-17 14:24 http://bsskillwsdyemmulatorsde...  

ddaff9daff983a3a13f51eff8a6f17bc


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Software crashed 		3 3 15 14.6 M

14 2020-07-17 14:26 http://sevea-fr.com/july13o.ex...  

0bb3bf0a178fcc963a51ee4f39ecb20d


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed 		2 2 2 15.2 M 46

15 2020-07-17 14:27 https://angelsdetour.com/mscwo...  

d150e39d9782a0bfff4a8c44a188e33c


Dridex VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 4 3.2 M

keyword