popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
136 2020-07-27 16:14 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit crashed 		7 7 3 4.0

137 2020-09-07 15:41 Invoice.exe  

01b18c1ec01a1341f043e6bb5fb4b968


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Collect installed applications AppData folder malicious URLs WriteConsoleW installed browsers check Tofsee Windows Browser DNS Software 		2 1 1 15.8 M 30 guest

138 2020-09-09 16:28 rocky.exe  

88f57c6bdaf928f966e6eb3af3a76754


Malware download Azorult VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself malicious URLs Tofsee ComputerName DNS crashed 		3 1 2 5.6 21 admin

139 2020-09-10 09:11 http://jizhonghua.com/  

da7c707c8cc7bb49761003626ca4e974


Dridex Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 6 6 5.6 admin

140 2020-09-10 10:18 Invoice.exe  

176ec96505cf39b80719907bd8386058


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory buffers extracted Creates executable files unpack itself malicious URLs sandbox evasion Tofsee Windows ComputerName DNS crashed keylogger 		1 2 1 16.4 34 admin

141 2020-09-10 15:29 Vicky.doc  

14508d1afccdd5ea6987ea28e1c737e6


VirusTotal Malware buffers extracted exploit crash unpack itself malicious URLs Tofsee Exploit DNS crashed 		1 1 1 5.4 M 34 admin

142 2020-09-11 09:11 http://wangpaiedu.com/  

7adc92cbeb9b8ea95250edd38cfa81cc


Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows Google DNS 		8 6 4 3.2 admin

143 2020-09-11 15:46 http://jizhonghua.com/  

5966fba3149a696609051604712b3816


Code Injection Creates executable files unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		38 11 1 4.0 guest

144 2020-09-11 18:06 vbc.exe  

05ebf344864ad1538637f6b95ba778f4


VirusTotal Malware RWX flags setting unpack itself malicious URLs Tofsee Interception DNS crashed 		2 1 5.0 M 35 guest

145 2020-09-12 08:41 http://edunara.kr/  

62407ebce6acc76d32bd9289d92e1b9c


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		23 11 4 4.6 guest

146 2020-09-12 08:48 newkon.exe  

bdf4d66a3488a185a2a2b5d9ff81e2b9


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 1 15.4 M 21 guest

147 2020-09-12 12:09 http://e-money.kr/  

15f0fa1a82e9e7376297959c48f3638c


Code Injection Creates executable files unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		6 4 1 3.6 guest

148 2020-09-14 09:26 filingood.exe  

069fd066e087d3bf47b18a93b26a1aee


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI exploit crash unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process malicious URLs installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName DNS Cryptographic key Software crashed 		5 7 1 17.0 M 25 guest

149 2020-09-14 09:46 DAYLL.exe  

1b557b166ddf21da002086de783f4aa5


Dridex TrickBot VirusTotal Malware Report suspicious privilege buffers extracted unpack itself malicious URLs sandbox evasion Kovter ComputerName Remote Code Execution DNS 		1 2 5 6.6 M 40 guest

150 2020-09-14 23:31 REP_PO_09142020EX.doc  

6717263e49bf0260a74ff538b4f6e32d


Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee Windows DNS 		3 3 5 4.2 13 guest

keyword