popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8941 2021-04-17 10:22 catalog-350434392.xlsm  

94e7b5a0f5cecb24336de03de0771631


unpack itself Tofsee DNS 		1 9 2 3.4 M ZeroCERT

8942 2021-04-17 10:20 catalog-359462809.xlsm  

f00e8a3cb014f7732fe0b5b685304ff2


unpack itself Tofsee DNS 		2 9 2 3.4 ZeroCERT

8943 2021-04-17 10:18 Ttcmb.exe  

d239a7aeffee188f2aa966e9f252e4bb


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 12.2 ZeroCERT

8944 2021-04-17 10:11 aguerox.exe  

be64ba16260fa8f15fe08e3fbcc32a0a


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key 		6 2 3 6 3.6 M 45 ZeroCERT

8945 2021-04-16 18:04 winsdk.exe  

35ab7b989418f63d814895500fe6617b


Process Kill FindFirstVolume CryptGenKey VirusTotal Cryptocurrency Miner Malware Cryptocurrency suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder suspicious TLD WriteConsoleW Tofsee Windows Tor ComputerName DNS 		1 9 8 6.6 M 30 ZeroCERT

8946 2021-04-16 09:56 catalog-651041236.xlsm  

eedd85d33f91ca72acae1df084d2d373

Check memory unpack itself Tofsee crashed 		7 7 2 2 3.2 ZeroCERT

8947 2021-04-16 09:56 catalog-64874377.xlsm  

608719001a3fbf939763a416e80f1410

VirusTotal Malware ICMP traffic unpack itself Tofsee DNS 		7 7 2 2 4.8 13 ZeroCERT

8948 2021-04-16 09:55 catalog-651450025.xlsm  

57aba2732b2168b1914c8b5a49369de4

VirusTotal Malware Check memory unpack itself Tofsee crashed 		4 7 2 2 3.8 11 ZeroCERT

8949 2021-04-16 09:37 catalog-64852490.xlsm  

7d5bcecf80df4dd2ba51da0ec80037fe

Check memory ICMP traffic unpack itself Tofsee crashed 		4 7 2 2 4.0 ZeroCERT

8950 2021-04-16 09:35 catalog-649166437.xlsm  

bd71cc9af8cdeececc41a6484cf5dbf4

VirusTotal Malware Check memory unpack itself Tofsee DNS crashed 		4 7 2 2 4.4 11 ZeroCERT

8951 2021-04-16 09:34 catalog-649822080.xlsm  

23fda0e556cfedba000e4510e40b090c

Check memory unpack itself Tofsee crashed 		4 7 2 2 3.2 ZeroCERT

8952 2021-04-16 09:18 catalog-617228643.xlsm  

3c2ffd4eb20488152e4882dffabd6b0d

VirusTotal Malware Check memory unpack itself Tofsee DNS crashed 		4 7 2 4.4 11 ZeroCERT

8953 2021-04-16 09:15 catalog-606434184.xlsm  

9c843d4ef72be7252faa977664af9763

VirusTotal Malware Check memory ICMP traffic unpack itself Tofsee crashed 		4 7 2 4.6 13 ZeroCERT

8954 2021-04-16 07:58 "https://ia601505.us.archive.o...  

Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 4 2 3.8 guest

8955 2021-04-15 07:45 Wydvkms.exe  

6477b1f3539248de6531ecc34c07c7c3


Azorult .NET framework Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 14.4 M 27 ZeroCERT

keyword