popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8866 2021-04-28 18:31 IMG_88134.exe  

4d0b19cd29e6c8ce724607b85771de8d


AsyncRAT backdoor Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 5 3 2 18.2 M 17 ZeroCERT

8867 2021-04-28 11:11 FreeMaps.af75d672c26d4cc59fc74...  

10e868b5ebf405fe2ca10e0552023d44


packer Gen2 OSCheck File format VirusTotal Malware Check memory Creates executable files unpack itself AppData folder sandbox evasion Tofsee DNS 		3 4 1 4.8 32 ZeroCERT

8868 2021-04-27 16:46 http://union.jctrip.cn/wp-incl...  

8d7c388e144427e46654e1f1d75de590


AgentTesla Vulnerability VirusTotal Malware MachineGuid Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 10 1 8.2 M guest

8869 2021-04-27 16:45 https://xixaoclothing.com/wp-a...  

8d7c388e144427e46654e1f1d75de590


AgentTesla VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.6 guest

8870 2021-04-27 09:14 JNhUwWi6.html  

1f76d9e2358dcba1670b35ce61d7bd96


Antivirus VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows ComputerName DNS Cryptographic key 		1 2 1 8.4 7 guest

8871 2021-04-27 09:13 JNhUwWi6  

1f76d9e2358dcba1670b35ce61d7bd96


Antivirus VirusTotal Malware powershell suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process Tofsee Windows ComputerName Cryptographic key 		1 2 1 7.8 7 ZeroCERT

8872 2021-04-27 08:05 https://p8hj.blogspot.com/p/44...  

5b0175dd30bd407af2915d017f1f4e90


Antivirus VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		27 22 2 4.6 ZeroCERT

8873 2021-04-26 18:27 IMG_5023075401.pdf  

427e21ef958ea63e6a12ce4d8d5a3e55


AgentTesla KeyBase Keylogger Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 4 13.4 M 16 ZeroCERT

8874 2021-04-26 18:12 IMG_608943011.pdf  

5f0e74e8c039c771ec8c2fa77981c7dd


AgentTesla KeyBase Keylogger Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 13.4 14 ZeroCERT

8875 2021-04-26 18:00 file  

45a0cfbd6749929ebd451bd5a04120e4

Code Injection Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		9 17 2 6.6 ZeroCERT

8876 2021-04-26 09:36 "http://5.79.75.210/0beU0RimJU...  

Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 4.2 M guest

8877 2021-04-26 09:24 apps.exe  

cd155fbcc108d054d747ab4514f3cfd6

VirusTotal Malware Code Injection buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities suspicious TLD Tofsee Windows Exploit DNS crashed 		46 16 1 6.4 14 ZeroCERT

8878 2021-04-24 20:55 info-33549970.xlsm  

effeb6845cee0ab05c452d39f9e5382d

VirusTotal Malware Check memory unpack itself Tofsee crashed 		4 2 3.2 5 ZeroCERT

8879 2021-04-24 18:22 documents-633524133.xlsm  

a14c32fc53b0c42e12a563838d67526b

VirusTotal Malware Check memory unpack itself Tofsee crashed 		4 2 3.2 4 ZeroCERT

8880 2021-04-24 18:22 documents-627949424.xlsm  

16a1eca6fb8eb48e67bcfe30beb28dca

VirusTotal Malware Check memory unpack itself Tofsee DNS crashed 		4 2 3.8 4 ZeroCERT

keyword