popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
15256 2023-03-05 04:20 http://94.26.226.51/panel/new_...  

ba40c472200733aebad89bc5e5c2ebd0


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSOffice File PE File PE64 Malware Code Injection Malicious Traffic exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 4 4.8 M guest

15257 2023-03-05 04:20 http://163.123.143.4/EXT/metai...  


AntiDebug AntiVM MSOffice File PNG Format JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 4.8 guest

15258 2023-03-05 04:19 http://163.123.143.4/EXT/metai...  


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 5.8 guest

15259 2023-03-05 04:18 http://185.246.221.126/bins/Am...  

17a8f85f937d8106c020a366d7c6ccb4


PWS[m] Downloader Malicious Packer UPX Malicious Library Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSO Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 5 6.0 M guest

15260 2023-03-05 04:18 http://94.26.226.51/panel/new_...  

9275ae35733730eda1da5e7e29bdf8db


PWS[m] Downloader Malicious Library Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM PE File PE64 MSOffice Fi Malware Code Injection Malicious Traffic exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 4 4.8 M guest

15261 2023-03-05 04:17 http://94.26.226.51/panel/new_...  

a58f0e04f4b55b5718ac0b1fa6b13d98


Malicious Packer Malicious Library AntiDebug AntiVM PE File PE64 Malware Code Injection Malicious Traffic exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 4 3.8 M guest

15262 2023-03-05 04:16 http://94.26.226.51/panel/new_...  

cc074e25e77d6a797edffea9cfc92662


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM DLL PE File PE64 MSOffice File Malware Code Injection Malicious Traffic exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 4 4.8 M guest

15263 2023-03-05 04:15 http://94.26.226.51/panel/new_...  

e8ee21f5fde8922468a84b4754ec6aec


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSOffice File DLL PE File PE64 Malware Code Injection Malicious Traffic exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 4 4.8 M guest

15264 2023-03-05 04:14 https://vk.com/doc10773776_660...  

413951d78ff6511e4ebb962c48f852ad


AntiDebug AntiVM MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		48 6 3 4.2 guest

15265 2023-03-05 04:13 http://94.26.226.51/panel/new_...  

507d37544705bca11894108add996eca


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSOffice File DLL PE File PE64 Malware Code Injection Malicious Traffic exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 4 4.8 M guest

15266 2023-03-05 04:12 http://94.26.226.51/panel/new_...  

30740716a5aaaeca0fb5565fbf2d596e


AntiDebug AntiVM DLL PE File PE64 Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		1 2 4.2 M guest

15267 2023-03-05 04:11 http://timenow.pw/exe/WindowsA...  


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs suspicious TLD Tofsee Windows Exploit DNS crashed 		1 2 5 5.2 guest

15268 2023-03-05 04:11 http://respekt5568.com/aN7jD0q...  

1b171f9a428c44acf85f89989007c328


PWS[m] Gen1 Downloader UPX Malicious Library Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM MSOffice File O Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 4 4.6 guest

15269 2023-03-05 04:10 http://94.26.226.51/panel/new_...  

cdb7fe8228526e485672af749889ef1d


AntiDebug AntiVM DLL PE File PE64 Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 4 4.2 M guest

15270 2023-03-05 04:10 https://167.179.114.189/push  


PWS[m] Downloader Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Escalate priviledges persistence FTP Http API AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 5.8 guest

keyword