popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10006 2020-10-13 18:26 invoice.exe  

9448a7e12108858e1e48097be290987b


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 1 16.2 21 guest

10007 2020-10-13 18:25 http://eddyholdingshuttle.co.z...  

9448a7e12108858e1e48097be290987b


Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		6 5 3 17.6 guest

10008 2020-10-13 16:51 https://bitbucket.org/soyag/la...  

b034a3ff4284b5b549d1c55387207229


Dridex Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 3 2.8 guest

10009 2020-10-13 11:22 http://www.advisertours.com/08...  

ca26ad3cfd67703c3e7a4855407725b5


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		3 2 4 5.0 M 46 admin

10010 2020-10-13 10:23 47694201-20200919-YB449177.doc  

4c99a6917c48b0dc5f30045683c43840


ENERGETIC BEAR Vulnerability VirusTotal Malware Report Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		1 8 8 6.8 42 guest

10011 2020-10-13 09:50 cr.exe  

d39be521d865df3ab5f3142e22427167


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 1 12.2 27 guest

10012 2020-10-13 09:29 magi.jpg.exe  

6f09c7f423232ef509f90e66b1146a50


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 2 1 16.6 M 34 guest

10013 2020-10-09 10:02 http://popcash.net/world/go/18...  

69f7b51e3f887ef9139b43b846a49cfd


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 5 3 4.6 M guest

10014 2020-10-09 09:44 osi.exe  

918b4df1f8d7b1e18e3e8fccdef3f5de


VirusTotal Malware unpack itself Tofsee DNS crashed 		2 1 1 3.0 37 guest

10015 2020-10-08 11:03 http://50.121.226.158/changepw...  

22d27255d945c05b79bfc74eb69a77a0


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		4 2 3 6.0 M 50 admin

10016 2020-10-08 10:09 http://e-money.kr/  

7d4638c3d5662dd60fcee9df0d9b75e5


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		31 11 4 4.6 guest

10017 2020-10-08 09:29 don.exe  

1941b425080aeb2d67a5f87c416c78dc


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key crashed keylogger 		4 3 1 15.8 18 guest

10018 2020-10-07 10:04 http://50.121.226.158/changepw...  

22d27255d945c05b79bfc74eb69a77a0


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		4 2 3 6.0 50 guest

10019 2020-10-07 09:30 v.exe  

95458c35d7afba9c35a6742af517e531


Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key crashed keylogger 		3 3 1 21.6 33 guest

10020 2020-10-07 09:20 m.exe  

e86dfa940e4913b73a5ce0d94df2a10a


Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key crashed keylogger 		3 3 1 21.0 35 guest

keyword