popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1981 2020-10-07 09:34 aaa.exe  

b6e573a5d3a6bb9f7ceb592d13a9fd92


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		8.6 24 guest

1982 2020-10-07 09:41 238428.png.exe  

d429a4330d4d38412c517834983abd31


AutoRuns Code Injection Check memory buffers extracted unpack itself Windows utilities Detects VMWare suspicious process malicious URLs sandbox evasion WriteConsoleW VMware Windows Browser ComputerName crashed 		8.4 guest

1983 2020-10-07 09:44 images.zip.exe  

22a968beda8a033eb31ae175b7e0a937


VirusTotal Malware 		1.8 41 admin

1984 2020-10-07 09:48 images.zip.exe  

22a968beda8a033eb31ae175b7e0a937


VirusTotal Malware 		1.4 41 admin

1985 2020-10-07 10:04 http://50.121.226.158/changepw...  

22d27255d945c05b79bfc74eb69a77a0


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		4 2 3 6.0 50 guest

1986 2020-10-07 11:33 PTDRZYuerB14PU6.exe  

0bb37df01d67551ee30e6301cb5d59d9


Emotet Malware download VirusTotal Malware Report PDB RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 3 4 7.0 47 guest

1987 2020-10-07 16:04 18053.xlsb  

46d5ee8e706c0c137394f519603fbfc2


VirusTotal Malware Creates executable files unpack itself malicious URLs DNS 		1 5.0 3 guest

1988 2020-10-08 09:29 don.exe  

1941b425080aeb2d67a5f87c416c78dc


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key crashed keylogger 		4 3 1 15.8 18 guest

1989 2020-10-08 09:29 WiPvqc8PxnUiCGh.exe  

854bd172baa97e9ceccd5984e39f6623


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Ransomware Windows Tor ComputerName crashed keylogger 		14.8 21 guest

1990 2020-10-08 09:38 c.exe  

c71eacf3ffaf82787a533eb452bcf3e7


VirusTotal Malware AutoRuns Code Injection Windows utilities suspicious process AppData folder Windows DNS 		1 6.0 64 guest

1991 2020-10-08 09:40 svchost.exe  

ce400cfe49777d6039d4b5d7317f44cc


VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows DNS 		4 4 8.6 22 guest

1992 2020-10-08 09:59 msbplay.exe  

db897c498d11b86bb0c7a486df033e60


VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself malicious URLs 		3.0 M 32 guest

1993 2020-10-08 10:09 http://e-money.kr/  

7d4638c3d5662dd60fcee9df0d9b75e5


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		31 11 4 4.6 guest

1994 2020-10-08 11:03 http://50.121.226.158/changepw...  

22d27255d945c05b79bfc74eb69a77a0


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		4 2 3 6.0 M 50 admin

1995 2020-10-08 17:50 regasm.exe  

be561ab612f3a4fd45d061ce27ed5f6d


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software crashed 		1 1 8 13.6 31 guest

keyword