popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46 2020-07-20 16:36 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 8 3 4.6

47 2020-07-20 16:39 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 8 3 4.6

48 2020-07-20 16:45 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Windows Exploit Browser ComputerName DNS crashed 		8 9 2 14.2

49 2020-07-20 16:59 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files ICMP traffic exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Windows Exploit Browser ComputerName DNS crashed 		8 9 2 14.4

50 2020-07-20 17:45 https://www.gomlab.com/downloa...  

04a1b261477eff216d800437c6d613fd


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		30 6 3 4.2

51 2020-07-20 17:46 https://robotica.cl/w3ZunC4T3N...  

6186934d6ebcbd2761413698113233cf


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 6 3 4.6

52 2020-07-20 18:31 https://robotica.cl/w3ZunC4T3N...  

6186934d6ebcbd2761413698113233cf


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 6 3 4.6

53 2020-07-20 22:08 http://salesforce-ibmcloud.koz...  

a4195bdf6d0f782598f69bc40c4d7e50


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		6 5 3 17.0 M 22

54 2020-07-20 22:10 http://salesforce-ibmcloud.koz...  

4a3b3aa0b72d467be7321ceac9d3db92


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		3 5 2 12.4 15

55 2020-07-20 23:31 http://124.160.126.238/11.exe  

5d2e9716be941d7c77c05947390de736


Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows Exploit DNS crashed 		4 4 7 10.8 M 57

56 2020-07-20 23:34 https://aliyousefpoor.com/wp-a...  

51fe38a980f41111074aabdde5ee5124


Dridex VirusTotal Malware Malicious Traffic Tofsee DNS 		2 4 3 2.4 M

57 2020-07-20 23:40 https://aliyousefpoor.com/wp-a...  

51fe38a980f41111074aabdde5ee5124


VirusTotal Malware Tofsee Windows DNS 		2 4 3 1.6 M

58 2020-07-21 09:14 index.doc  

c703b02e832e614300d89d6ca20ec066


Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		1 5 1 3.8 17

59 2020-07-21 09:15 popopo.png  

70a2ed9f2ca011da8aca485e966ec973


VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		4 6 5 15.2 M 28

60 2020-07-21 09:17 index3.doc  

a738c10344822c4368d7bc1f088a0221


Vulnerability Malware Malicious Traffic unpack itself Tofsee Windows DNS 		4 5 5 3.6

keyword