popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10171 2020-07-20 10:55 https://www.naver.com  

3a4ec0c8e51d89dfc8f7ecd45aaa13fa


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		142 8 36 4.6

10172 2020-07-20 10:32 https://www.naver.com  

1c0ba832c516b1fb05a08c69fea96f94


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		150 9 37 4.6

10173 2020-07-20 10:17 https://www.naver.com  

90a331f9ffcb686ee11f0e67ee073e57


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		141 9 39 4.6

10174 2020-07-20 10:07 https://www.naver.com  

c542f4f30dd5e5360ddeeb6bc0432f55


Code Injection heapspray Creates executable files unpack itself Windows utilities malicious URLs Tofsee Windows 		34 3.2

10175 2020-07-20 09:59 https://www.naver.com  

8a920a34010cb1fb427f65e440620e60


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit crashed 		37 3.6

10176 2020-07-20 09:38 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Interception Windows Exploit Browser ComputerName DNS crashed 		8 4 3 14.2

10177 2020-07-20 09:30 https://www.naver.com/  

64bea819af27c133c9ef30cf3a0b6a9a


Malware Code Injection Malicious Traffic heapspray Creates executable files unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		181 12 31 5.0

10178 2020-07-17 14:30 http://bsskillwsdyemmulatorsde...  

ddaff9daff983a3a13f51eff8a6f17bc


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Software crashed 		3 3 15 14.6 M

10179 2020-07-17 14:27 https://angelsdetour.com/mscwo...  

d150e39d9782a0bfff4a8c44a188e33c


Dridex VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 4 3.2 M

10180 2020-07-17 14:26 http://sevea-fr.com/july13o.ex...  

0bb3bf0a178fcc963a51ee4f39ecb20d


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed 		2 2 2 15.2 M 46

10181 2020-07-17 14:24 http://bsskillwsdyemmulatorsde...  

ddaff9daff983a3a13f51eff8a6f17bc


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Software crashed 		3 3 15 14.6 M

10182 2020-07-17 14:22 http://jdtrusttrading.org/4656...  

02bb1837b843f982b3a5c49aad515e10


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 2 16.2 M 33

10183 2020-07-17 11:50 http://19workfineanotherrainbo...  


VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 1 2 3.8 M

10184 2020-07-17 11:44 http://111.90.148.23/100720.do...  

7677a0501aa639d98781a5eb58a91324


VirusTotal Malware Code Injection Malicious Traffic unpack itself Windows utilities Tofsee Windows DNS 		3 2 4 4.2 M 16

10185 2020-07-17 11:37 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		4 3 2 4.6

keyword