popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
196 2020-06-25 11:11 http://37.49.230.204/ABU.exe  

72c311a40dbcb3fb6bdd70df9b6be8be


VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		4 5 6.0 4

197 2020-06-25 11:31 http://37.49.230.204/ABU.exe  

7bec956dcddd39b40c88debf266e291a


VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		4 5 7.2 15

198 2020-06-25 12:55 http://37.49.230.204/ABU.exe  

4c097af29449e5d1e6cf77a9c58b2968


VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		4 5 6.8 15

199 2020-06-25 14:03 https://cdn1.estsecurity.com/s...  

599168bde854ae6d22a9cc5df5a3c0e2


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder Windows Exploit crashed 		2 7 5.0

200 2020-06-25 14:33 http://office-services-sec.com...  

1d0e1d24ad35a2357af094b32e1cb25a


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		6 6 5.2 13

201 2020-06-25 14:40 http://office-services-sec.com...  

a87a313263697c3f81881defa55b269c


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		6 6 5.2 13

202 2020-06-25 14:56 crimea.ps1  

b07c04d53312dd24935701ac700cc8a5


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		2 2 9.0 9

203 2020-06-25 14:58 crimea.ps1  

b07c04d53312dd24935701ac700cc8a5


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		2 2 9.0 9

204 2020-06-25 15:01 b37cdeed56f98ddb4a507ff7d273fa...  

71743b62964b6634da810d13b413501f


Checks debugger unpack itself malicious URLs Remote Code Execution 		2.0

205 2020-06-25 15:08 http://office-services-sec.com...  

3fe1e1b56b127dd61ebf330b827a458d


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		6 6 5.2 13

206 2020-06-25 15:08 202006091658_c90a72e11f1ff6cad...  

71743b62964b6634da810d13b413501f


Checks debugger unpack itself Remote Code Execution 		1.2

207 2020-06-25 15:11 202006091658_c90a72e11f1ff6cad...  

71743b62964b6634da810d13b413501f


Checks debugger unpack itself Remote Code Execution 		1.2

208 2020-06-25 15:24 http://hzhuafengdq.cn/content/...  

e443b6913685380f9b2716cbb9d2ed60


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		34 6 4.6

209 2020-06-25 15:30 온라인+학술대회+한시적+지원+관련+Q&A.hwp...  

257a81471a001af1fa0d82069c92993c


VirusTotal Malware Checks debugger Creates shortcut Creates executable files unpack itself 		1.8 3

210 2020-06-25 15:32 http://hzhuafengdq.cn/content/...  

e443b6913685380f9b2716cbb9d2ed60


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		34 6 4.6

keyword