popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10111 2020-07-21 09:49 https://class.britishonline.co...  

dcf7add878e1e15a80ae49a24f193a33


Dridex VirusTotal Malware Code Injection Malicious Traffic unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		2 3 3 4.6

10112 2020-07-21 09:45 http://88.218.16.20/ztYQWLnqiK...  

4af9079a6228f2857a84e35b098d6bdd


VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		2 2 4 5.0

10113 2020-07-21 09:31 index5.doc  

9c1b5cf8aae29751888a2f28145cd7d2


Emotet Malware download Vulnerability VirusTotal Malware Report Malicious Traffic unpack itself Tofsee DNS 		4 4 3 4.2 19

10114 2020-07-21 09:17 index3.doc  

a738c10344822c4368d7bc1f088a0221


Vulnerability Malware Malicious Traffic unpack itself Tofsee Windows DNS 		4 5 5 3.6

10115 2020-07-21 09:15 popopo.png  

70a2ed9f2ca011da8aca485e966ec973


VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		4 6 5 15.2 M 28

10116 2020-07-21 09:14 index.doc  

c703b02e832e614300d89d6ca20ec066


Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		1 5 1 3.8 17

10117 2020-07-20 23:40 https://aliyousefpoor.com/wp-a...  

51fe38a980f41111074aabdde5ee5124


VirusTotal Malware Tofsee Windows DNS 		2 4 3 1.6 M

10118 2020-07-20 23:34 https://aliyousefpoor.com/wp-a...  

51fe38a980f41111074aabdde5ee5124


Dridex VirusTotal Malware Malicious Traffic Tofsee DNS 		2 4 3 2.4 M

10119 2020-07-20 23:31 http://124.160.126.238/11.exe  

5d2e9716be941d7c77c05947390de736


Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows Exploit DNS crashed 		4 4 7 10.8 M 57

10120 2020-07-20 22:10 http://salesforce-ibmcloud.koz...  

4a3b3aa0b72d467be7321ceac9d3db92


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		3 5 2 12.4 15

10121 2020-07-20 22:08 http://salesforce-ibmcloud.koz...  

a4195bdf6d0f782598f69bc40c4d7e50


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		6 5 3 17.0 M 22

10122 2020-07-20 18:31 https://robotica.cl/w3ZunC4T3N...  

6186934d6ebcbd2761413698113233cf


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 6 3 4.6

10123 2020-07-20 17:46 https://robotica.cl/w3ZunC4T3N...  

6186934d6ebcbd2761413698113233cf


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 6 3 4.6

10124 2020-07-20 17:45 https://www.gomlab.com/downloa...  

04a1b261477eff216d800437c6d613fd


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		30 6 3 4.2

10125 2020-07-20 16:59 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files ICMP traffic exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Windows Exploit Browser ComputerName DNS crashed 		8 9 2 14.4

keyword