popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9916 2020-10-29 09:55 B_OKT_100120_QMJ_102820.doc  

3d52fc5a050f184b6b5831c070c18631


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		3 7 1 5.0 M 15 admin

9917 2020-10-29 09:49 file_41974312.doc  

6b85477e763034dc0989adb4411c117e


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		4 5 1 5.4 M 30 admin

9918 2020-10-29 09:37 arc 20201029 1690.doc  

cff8e0945303bb73e63281b98a613ef1


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		2 11 4 4.0 M admin

9919 2020-10-29 09:13 Attachments-Y369.doc  

710a61a57907e8f67cc0776ed93be98c


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		2 11 4 4.6 M 16 admin

9920 2020-10-29 07:57 https://aabeds.com/wordpress/O...  

da3bc612bb90dce6e68becd3ff56f5d8


AutoRuns Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Tofsee Windows Exploit Advertising ComputerName DNS Cryptographic key crashed 		2 4 2 10.4 guest

9921 2020-10-29 07:52 https://cacomixtle.net/wp-admi...  

d31c81b34cabc36bd0089c0651769552


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		3 3 4.2 guest

9922 2020-10-28 21:51 arc_EW7843494089FU.doc  

5057e8eec54ab03814f7b5b9a6f73748


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		4 5 1 4.4 M guest

9923 2020-10-28 19:10 Untitled_VW2874948220CG.doc  

7f8b12d54d354fcecea19637aa6739d5


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		2 5 4 5.0 M 18 admin

9924 2020-10-28 18:06 link.exe  

a9cbc59987ec442437ffea45aade05ba


Dridex VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Tofsee Windows ComputerName Cryptographic key 		1 2 4 9.4 M 40 admin

9925 2020-10-28 12:26 Electronic form.doc  

eb6a6943bf8db6a0c7003c1c869b3323


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		3 6 1 6.0 M 14 admin

9926 2020-10-28 11:38 aPfjegjaF.exe  

6d8eb085d7dfcfdd55f26262e51fbfdc


Browser Info Stealer Emotet Malware download FTP Client Info Stealer Vidar Azorult Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Ransomware Interception Zeus OskiStealer Stealer Windows Browser Email ComputerName Cryptographic key Software crashed Downloader 		16 9 11 27.4 M admin

9927 2020-10-28 10:35 https://achremittanceservices....  

d32109224e04cbdb24ca32fb320f89a1


Dridex Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows Tor DNS 		3 4 2.8 admin

9928 2020-10-28 10:34 DOC_96439691.doc  

56a98d4ac1377142220a9cfc737a13b3


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		2 6 5 5.4 M admin

9929 2020-10-28 10:30 https://valenciaexpresslaundry...  

09ecf62b70523317e0631ad7d50b669b


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 3 4.4 admin

9930 2020-10-28 10:21 tyuew.exe  

4fc3c6a6fc4711ad9907fdf45810829c


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Windows DNS Cryptographic key crashed 		4 5 1 12.4 17 admin

keyword