popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
31 2020-07-20 13:33 23d3382.hta  

d8c6560478cca57bb84a2c37228c44bf


Malware Code Injection Malicious Traffic unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		2 2 1 4.0

32 2020-07-20 13:39 index.doc  

b60e35e93dbbbc16b3e578ec6645c562


Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		5 8 1 6.0 M 37

33 2020-07-20 14:01 http://agoty.org/wp-content/up...  

b60e35e93dbbbc16b3e578ec6645c562


VirusTotal Malware Code Injection exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 1 4.0 M

34 2020-07-20 14:06 23d3382.hta  

d8c6560478cca57bb84a2c37228c44bf


Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs human activity check Tofsee Interception ComputerName DNS 		5 3 2 6.6

35 2020-07-20 14:15 23d3382.hta  

d8c6560478cca57bb84a2c37228c44bf


Browser Info Stealer Malware Code Injection Malicious Traffic Check memory Checks debugger buffers extracted RWX flags setting exploit crash unpack itself Check virtual network interfaces malicious URLs installed browsers check Tofsee Exploit Browser ComputerName DNS crashed 		3 2 2 8.8

36 2020-07-20 14:27 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 3 3 4.6

37 2020-07-20 14:33 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 3 3 4.6

38 2020-07-20 15:11 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Windows Exploit Browser ComputerName DNS crashed 		8 4 2 15.2

39 2020-07-20 15:22 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 3 3 4.6

40 2020-07-20 15:36 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		11 4 3 5.2

41 2020-07-20 15:53 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 3 3 4.6

42 2020-07-20 16:10 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 3 3 4.6

43 2020-07-20 16:17 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 8 3 4.6

44 2020-07-20 16:24 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 3 3 4.6

45 2020-07-20 16:29 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 3 3 4.6

keyword