popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10081 2020-07-22 12:41 Inv-XBGH1130_23212865.doc  

c2e592fbfb05a17f76becd999e52a01b


Vulnerability VirusTotal Malware unpack itself Tofsee DNS 		1 1 1 3.4 19

10082 2020-07-22 12:37 Inv ET5808_565971217.doc  

e83403331092ea4ebf89495eb3823deb


Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		2 2 1 4.2 19

10083 2020-07-22 12:33 http://systemidentifytheprotoc...  

16dc050b380c8161b7973a01b8c7b879


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName Trojan DNS Cryptographic key Software crashed 		3 3 4 15.6 8

10084 2020-07-22 11:16 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 3 3 4.6

10085 2020-07-22 11:09 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 3 3 4.6

10086 2020-07-21 18:27 https://class.britishonline.co...  

02032a73a8b1788cdcc567b749812444


Dridex VirusTotal Malware Code Injection Malicious Traffic unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		2 3 3 4.4

10087 2020-07-21 18:18 F_UUW_070120_VNF_072120.doc  

0cd06145a71c3f2bab7722fd5788579d


Emotet Malware download Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee Windows DNS 		4 5 6 5.4 20

10088 2020-07-21 18:18 https://bloomcareltd.co.uk/wp-...  

85321df51c43c38d4bc6927ee7cea7a9


Dridex VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 3 3.2

10089 2020-07-21 18:17 FILE-2020_07_21-195317.doc  

589ee490769a1737f7365d7c5655008e


Vulnerability Malware Malicious Traffic unpack itself Tofsee Windows DNS 		4 4 3 3.6

10090 2020-07-21 14:28 doc-5382.docm  

ae18ed686e82ba41cebc162245c7fc42


VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		2 2 1 3.0 20

10091 2020-07-21 14:23 doc-5382.docm  

ae18ed686e82ba41cebc162245c7fc42


VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		2 2 1 3.0 20

10092 2020-07-21 14:19 qes48.exe  

9c6cfc58709751f6e90b4c9be2d7aef2


Emotet Malware download VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Tofsee Windows Advertising ComputerName DNS Cryptographic key 		3 4 2 8.0 M 26

10093 2020-07-21 13:38 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 3 3 4.6

10094 2020-07-21 13:09 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 3 3 4.6

10095 2020-07-21 12:53 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 3 3 4.6

keyword