popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10021 2020-10-06 14:01 FILE-982.doc  

967f1d69e065008f106804ee61098f1c


Vulnerability VirusTotal Malware Report Malicious Traffic unpack itself Tofsee Windows DNS 		2 4 6 5.8 M 40 guest

10022 2020-09-29 11:21 zxcv.EXE  

92821d6dd83105f5f2d08c43f28fa309


Browser Info Stealer Emotet Malware download FTP Client Info Stealer Vidar Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Zeus OskiStealer Stealer Windows Browser Email ComputerName DNS Cryptographic key Software crashed Downloader 		24 6 10 28.6 M 26 admin

10023 2020-09-29 10:34 raw.exe  

2d46889b6d794ac1fcf58bf340c4666a


VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee ComputerName DNS 		1 1 1 4.6 29 guest

10024 2020-09-26 09:46 https://www.urban-vpn.network/...  

01527bfc480e2a2d52be7fc1f3a792a8


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 4.2 guest

10025 2020-09-25 14:03 https://www.sanambakshi.com/wp...  

5c50a1af9fe8c9136fc5738a3154b3ec


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 4.4 guest

10026 2020-09-25 07:46 http://198.12.66.108/jojo.exe  

ad6564701054b692bcf47b5feb6324a2


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key crashed keylogger 		7 5 4 16.8 M guest

10027 2020-09-24 22:29 jojo.exe  

ad6564701054b692bcf47b5feb6324a2


Browser Info Stealer Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key crashed keylogger 		5 3 1 15.0 admin

10028 2020-09-24 08:11 http://srksmaisw.org/manufactu...  

e09eef5b5566f81b46ac3ac201d6b794


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		4 2 3 4.2 guest

10029 2020-09-23 10:10 http://gooddns.ir/bobbyx/XefEz...  


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 5.4 M admin

10030 2020-09-23 09:53 http://gooddns.ir/ashleyx/solu...  


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 5.4 admin

10031 2020-09-23 07:53 https://www.victoryuae.co/soon...  

b33e40c5c4ded6d3c5cd00bbe0c9c9bf


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 3 4.2 M guest

10032 2020-09-22 15:50 REP_IA1J49KDNZR9PQE.doc  

5f3a967f8c5bb8925e8754a04f22f9d8


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		2 3 1 5.4 30 admin

10033 2020-09-22 13:36 https://k.top4top.io/p_1671u02...  

63c74e45cb4ba38e8ba6089425a6abd8


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 3 5.2 M 46 admin

10034 2020-09-22 11:25 rc.exe  

a205712a031be2c61db9cd98c1c29a14


Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities AppData folder malicious URLs Tofsee Interception Windows DNS 		1 3 1 12.0 M 47 admin

10035 2020-09-22 10:10 MAIN.exe  

7c357e54f775f0042c2d8e36d0c38fa9


Dridex TrickBot VirusTotal Malware PDB Malicious Traffic unpack itself Check virtual network interfaces malicious URLs Tofsee Kovter ComputerName DNS 		3 3 2 5.8 M 48 admin

keyword