popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8986 2023-10-27 10:54 ngone.vbs  

bb1a98b873c6fbebb5c2bab804fbe831


VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

8987 2023-10-27 10:56 don.vbs  

049cbf1fa6fb0b213b5d6aace06efbd9


VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 M 5 ZeroCERT

8988 2023-10-27 10:58 ngown.vbs  

74558dda2ee55f1223e34b0e18411764


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 5 2 9.6 M 5 ZeroCERT

8989 2023-10-27 12:25 File.7z  

3c62d34e99c4d0766c6a30aff0ff00d4


PrivateLoader Stealc Amadey Escalate priviledges PWS KeyLogger AntiDebug AntiVM RedLine Malware download Amadey Malware c&c Microsoft suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself suspicious TLD IP Check PrivateLoader Tofsee Stealc Stealer Windows Browser Trojan DNS Downloader 		55 91 42 23 6.8 M ZeroCERT

8990 2023-10-27 17:03 HTMLXLAMieBrowser.dOC  

baeaa0fda1df43a65dc12777327db43b


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic exploit crash unpack itself Tofsee Exploit DNS crashed 		3 6 3 4.0 M 28 ZeroCERT

8991 2023-10-27 17:05 xlammexpoittt.vbs  

9595077ef106c2510f73d0132ea81155


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		4 6 2 10.2 5 ZeroCERT

8992 2023-10-27 19:47 북한최고인민회의 결과.lnk  

cc96ba45dd2b6a6d7aa300d77e49c095


Generic Malware Downloader Antivirus HWP PS PostScript Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Sniff Audio HTTP DNS Code injection Internet API FTP KeyLogger P2P Hide_URL AntiDebug AntiVM Lnk Format MSOffice VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 11.2 28 guest

8993 2023-10-28 12:38 HTMLIEbrowserHistoryClean.doc  

5ad1dfb31daa5015f4fdc8af08b50ae9


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Tofsee Exploit crashed 		2 3 2.8 M 30 ZeroCERT

8994 2023-10-28 12:39 HTMLDesginbrowser.vbs  

b32067242d7b194386069c8cf33741df

VirusTotal Malware buffers extracted wscript.exe payload download Tofsee 		1 2 2 3.0 5 ZeroCERT

8995 2023-10-28 12:41 audiodgse.exe  

bbf6104b2b2953e63d98daf9c6fec2b1


LokiBot UPX .NET framework(MSIL) PWS SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Browser Email ComputerName DNS Software crashed 		2 4 10.6 M 41 ZeroCERT

8996 2023-10-28 12:42 HTMLIEBrowserHistory.vbs  

56238116f5d9877c000e6431306d0071

VirusTotal Malware wscript.exe payload download Tofsee 		1 2 2 2.0 M 1 ZeroCERT

8997 2023-10-28 12:43 HTMLDesginBrowserInternet.dOC  

c6f17e9d8c72950b1100f1ab9c3ab77d


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Tofsee Exploit crashed 		2 3 2.6 M 26 ZeroCERT

8998 2023-10-28 12:44 Yqmx.vbs  

3575c1d07813dd220063c02c664d1827


Generic Malware Antivirus PowerShell VirusTotal Malware powershell suspicious privilege Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 5 2 9.6 M 5 ZeroCERT

8999 2023-10-28 12:49 HTMLxlaIEbrowser.dOC  

2dd55c2a09a20b395c4034c934651113


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware VBScript Malicious Traffic RWX flags setting exploit crash Tofsee Exploit DNS crashed 		3 6 3 4.0 M 29 ZeroCERT

9000 2023-10-28 12:51 HTMLIEBrowserHistorycleaner.dO...  

1276da2350d722faf931038319ea6613


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash Tofsee Exploit crashed 		2 3 2.8 M 30 ZeroCERT

keyword