popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
121 2020-07-23 13:33 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit crashed 		7 7 3 4.0

122 2020-07-23 14:31 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit crashed 		7 7 3 4.0

123 2020-07-24 17:06 cursor.png.exe  

0c84e3949e3e8908425b234112350e0f


Dridex TrickBot Malware Report suspicious privilege Malicious Traffic buffers extracted unpack itself malicious URLs Kovter ComputerName DNS 		5 6 4 5.6

124 2020-07-24 21:50 https://tenders-dz.com/license...  

2ba9f02e8685e6d19b5386513083ce64


Dridex VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 3 3.2

125 2020-07-24 22:36 http://199.168.100.74/upsupx3....  

142709025a9e6d920384c011e24f83f3


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		2 4 7 6.6 M 59

126 2020-07-25 12:10 64.exe  

2258502bb5e0807e70a02fb9a39c6184


VirusTotal Malware MachineGuid Code Injection buffers extracted RWX flags setting Windows utilities suspicious process malicious URLs Tofsee Windows ComputerName 		4 1 7.0 18

127 2020-07-25 21:16 cursor.png.exe  

ec90ccfa53fe7d8b77ed05c6ef51a7b1


Dridex TrickBot Malware Report suspicious privilege buffers extracted RWX flags setting unpack itself malicious URLs Tofsee Kovter ComputerName DNS 		1 2 4 5.0

128 2020-07-25 21:19 https://tenders-dz.com/license...  


Dridex VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		2 2 3 3.2 M

129 2020-07-26 19:20 http://southwestlogistics.net/...  

654fdcfb7334c24fff5452d60a67083c


Dridex VirusTotal Malware Code Injection Malicious Traffic buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		2 4 5 8.0 13

130 2020-07-27 12:31 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit crashed 		7 7 3 4.0

131 2020-07-27 12:40 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit crashed 		7 7 3 4.0

132 2020-07-27 13:37 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit crashed 		7 7 3 4.0

133 2020-07-27 14:27 ransom.js  

6d6a0d13f1f121e62535b378f3f17a0f


Dridex Malware wscript.exe payload download malicious URLs Tofsee DNS 		2 1 3 2.6

134 2020-07-27 15:11 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit crashed 		7 7 3 3.6

135 2020-07-27 16:08 https://liskcrypto.top/zbs.exe  

0904add71c8b1b59d251c3cc8e0d3841


VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		1 1 2 4.6

keyword