popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1696 2020-09-10 09:37 Complaint_Letter_1163852919_09...  

e7d0adf42a8a7e72bdf8c7f3aa58234d


Malware Malicious Traffic Check memory Checks debugger unpack itself Windows DNS 		1 3 4.6 admin

1697 2020-09-10 10:18 Invoice.exe  

176ec96505cf39b80719907bd8386058


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory buffers extracted Creates executable files unpack itself malicious URLs sandbox evasion Tofsee Windows ComputerName DNS crashed keylogger 		1 2 1 16.4 34 admin

1698 2020-09-10 13:40 Search results.txt  

4e1df12e5dfc38f9fc5e6776d6a908bc


Check memory unpack itself malicious URLs 		1.4 guest

1699 2020-09-10 15:10 UNTITLED-20200906-61199.doc  

e8c455b9d0a528d8e47a5fa5c949e368


VirusTotal Malware Malicious Traffic unpack itself Windows Browser DNS 		2 3 4 5.0 M 39 admin

1700 2020-09-10 15:28 ns8uyl3nawcgvej.msi  

9bee85e261119758897496566570c781


VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check ComputerName 		3.8 M 29 admin

1701 2020-09-10 15:29 Vicky.doc  

14508d1afccdd5ea6987ea28e1c737e6


VirusTotal Malware buffers extracted exploit crash unpack itself malicious URLs Tofsee Exploit DNS crashed 		1 1 1 5.4 M 34 admin

1702 2020-09-11 09:11 http://wangpaiedu.com/  

7adc92cbeb9b8ea95250edd38cfa81cc


Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows Google DNS 		8 6 4 3.2 admin

1703 2020-09-11 10:56 poward.php.exe  

b2337d287b503d8acf9cd7aefd54da5a

 0.8 admin

1704 2020-09-11 15:46 http://jizhonghua.com/  

5966fba3149a696609051604712b3816


Code Injection Creates executable files unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		38 11 1 4.0 guest

1705 2020-09-11 18:06 vbc.exe  

05ebf344864ad1538637f6b95ba778f4


VirusTotal Malware RWX flags setting unpack itself malicious URLs Tofsee Interception DNS crashed 		2 1 5.0 M 35 guest

1706 2020-09-12 08:41 http://edunara.kr/  

62407ebce6acc76d32bd9289d92e1b9c


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		23 11 4 4.6 guest

1707 2020-09-12 08:48 newkon.exe  

bdf4d66a3488a185a2a2b5d9ff81e2b9


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 1 15.4 M 21 guest

1708 2020-09-12 08:53 winlog.exe  

f9fc2f65baf1f6048cf18f04720fb5a9


VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs crashed 		3.8 13 guest

1709 2020-09-12 08:53 invoice_241234.doc  

0f12dbebb691cf51c4252d6399c00005


LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit Trojan DNS crashed 		2 2 15 5.6 M 25 guest

1710 2020-09-12 08:54 invoice_241565.doc  

83628b9dba41ccd7dc08cc4a6d989bca


LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		2 1 12 4.8 M 23 guest

keyword