popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9061 2021-03-16 13:43 cdi.exe  

25be85a9de358519cde0817dfad40b23


Azorult .NET framework ftp Client info stealer email stealer browser Google Chrome User Data Win Trojan agentTesla Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS crashed 		2 4 4 12.0 30 ZeroCERT

9062 2021-03-15 16:26 login.vbs  

49f685bf27de38094374336be540b200


Antivirus Malware VBScript powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key DDNS Dropper 		3 5 2 10.0 r0d

9063 2021-03-14 12:16 IMG_0103_Scanned_120_37.pdf  

e5ac1ed6a1f096b7d16362595f913365


ftp Client info stealer email stealer Win Trojan agentTesla browser Antivirus Google Chrome User Data AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.6 M 28 ZeroCERT

9064 2021-03-12 19:08 PO_2173_Scanned_13.pdf  

0cb0ce99b82727b4701d9aeab2aa4451


ftp Client info stealer email stealer Win Trojan agentTesla browser Antivirus Google Chrome User Data AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.0 M 22 ZeroCERT

9065 2021-03-12 19:05 1090905469.exe  

3ab5db8a82b6ca11f37100b4fa751c72


Azorult .NET framework AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces malicious URLs installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 6 2 16.6 M 10 ZeroCERT

9066 2021-03-12 18:57 856125340.exe  

0e9b44989a3627976703bbe1e259cf62


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Tofsee Windows DNS Cryptographic key 		1 2 1 1 4.8 M 50 ZeroCERT

9067 2021-03-12 18:47 solution.iops.exe  

1f0d7f3144ba0d50374f61c941f5a94e


Emotet Trickbot Gen Dridex TrickBot VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces malicious URLs Kovter ComputerName Remote Code Execution DNS crashed 		1 10 5 9.2 M 23 ZeroCERT

9068 2021-03-12 18:35 IMG_105-10_60_85.pdf  

b47dd39109575e7b48e55f3e8d402a55


Azorult .NET framework ftp Client info stealer email stealer Win Trojan agentTesla browser Antivirus Google Chrome User Data AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 17.0 M 40 ZeroCERT

9069 2021-03-12 18:23 eve.exe  

dc7faccd6a090e655cfa865903b7a70b


Azorult .NET framework VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself malicious URLs Tofsee Windows DNS 		4 5 4 5.8 M 36 ZeroCERT

9070 2021-03-12 18:16 1370132254.exe  

8ca675896f6c9ad9fe8deb1cc63bf8f5


Azorult .NET framework UltraVNC AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder malicious URLs suspicious TLD installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		6 11 2 20.0 M 48 ZeroCERT

9071 2021-03-12 18:15 2041131341.exe  

526489ddbfd0d84e845ccd132cae5555


UltraVNC VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows DNS Cryptographic key crashed 		1 2 1 6.0 M 45 ZeroCERT

9072 2021-03-12 14:25 1873085694.exe  

fea26a213a022eb79c3f7dee7f9d107a


UltraVNC AsyncRAT backdoor VirusTotal Malware Buffer PE PDB Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs suspicious TLD Tofsee Windows Cryptographic key crashed 		3 4 1 7.6 M 49 ZeroCERT

9073 2021-03-12 14:24 1776646202.exe  

c4007a10fead6776db900abff2ae55b2


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows DNS Cryptographic key 		1 2 1 5.0 M 32 ZeroCERT

9074 2021-03-12 14:14 1694582027.exe  

e4e9be25d58ace415d3c1481986b99ff


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows Cryptographic key 		1 2 1 4.6 M 53 ZeroCERT

9075 2021-03-12 13:43 872027265.exe  

f9193808726bf166c76170b5020edb00


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs suspicious TLD installed browsers check Tofsee Ransomware Windows Browser ComputerName Cryptographic key Software crashed 		3 10 1 14.2 M 55 ZeroCERT

keyword