popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9991 2020-10-19 10:42 http://google.com  

5c8e481fca1860d15244132ca413e8ea


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Tofsee Windows DNS 		10 5 1 3.6 admin

9992 2020-10-19 10:40 http://google.com  

7c5b5c860e570c3a102b9ad3b70d5250


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Tofsee Windows DNS 		14 6 1 3.6 admin

9993 2020-10-19 09:28 https://docsecure.top/xls/0061...  

92e79228771983699fc0cfe8dfa7f407


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 2 7.4 M guest

9994 2020-10-19 07:54 https://docsecure.top/xls/0056...  

d694f94ba539e86d95c6a3671dd6b455


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 2 7.2 M guest

9995 2020-10-18 10:30 cmca.jpg.exe  

cd08d517ecfc84ccb7f41549ed7b6c12


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 1 1 10.8 23 guest

9996 2020-10-18 10:23 melo.jpg.exe  

ec56dfc73215179dcd26dd36e8d143d6


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 2 1 14.8 M 22 guest

9997 2020-10-16 10:06 bob.exe  

3aff71a139f4a5201d81b00a4a1d17c4


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 1 13.6 27 guest

9998 2020-10-15 18:40 https://poptateseatery.com/pic...  

41e710898f863e44ab67eea0aa981289


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 4.2 guest

9999 2020-10-15 18:34 https://marcussoil.com/MdF3y0f...  

b5daea22056dbf2a79b2249c70c5e441


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 4.4 guest

10000 2020-10-15 14:26 L_35671667072801532865268.doc  

c641df2d18593f8b7de8c3c7b7bb49c1


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		4 5 3 5.2 M 26 guest

10001 2020-10-15 10:13 bag.exe  

dd5d50506fd70f80667f33296d7f45d4


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger WMI unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 2 5 11.8 M 28 guest

10002 2020-10-14 10:01 https://centraldispatchinc.com...  


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 4.2 admin

10003 2020-10-14 10:00 22S0D255S4D111D22S1D4.msi  

c07d74b3537c91723b2959cd0d0b3c85


Dridex VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs AntiVM_Disk VM Disk Size Check Tofsee ComputerName DNS 		1 3 4.2 17 admin

10004 2020-10-14 09:30 keys.exe  

d15cc83dd857e9652c5a2ac775590c93


VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		1 1 1 6.4 19 admin

10005 2020-10-14 09:11 rc.exe  

594e5c8c28579857cead33db64e2cb5d


Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities AppData folder malicious URLs Tofsee Interception Windows DNS 		1 3 1 12.4 36 guest

keyword