popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2131 2020-10-18 15:46 gk.exe  

ee536c45fd3fa66da13cb0b15774bd16


VirusTotal Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 6.8 32 guest

2132 2020-10-19 07:54 https://docsecure.top/xls/0056...  

d694f94ba539e86d95c6a3671dd6b455


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 2 7.2 M guest

2133 2020-10-19 07:59 http://flowerdeliverypasadena....  

2bdc8f8afab8ee9ba26576c526d0940b


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Exploit Advertising ComputerName DNS Cryptographic key crashed 		3 3 3 11.8 M 27 guest

2134 2020-10-19 09:18 REP_20201018_L386.doc  

57bf98d84c86b699f5173c9f624ba0ba


Vulnerability VirusTotal Malware unpack itself malicious URLs 		3.6 M 38 guest

2135 2020-10-19 09:21 eh.exe  

4d0f2cb16083c2c99e05cdb59f2d3243


VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		7.2 M 27 guest

2136 2020-10-19 09:28 https://docsecure.top/xls/0061...  

92e79228771983699fc0cfe8dfa7f407


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 2 7.4 M guest

2137 2020-10-19 09:29 eh.exe  

4d0f2cb16083c2c99e05cdb59f2d3243


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		8.6 M 27 admin

2138 2020-10-19 10:34 Wkhuldcw8s2x4nsXa.exe  

684ba2ea81a8e9ab031260cbf0dd5db8


VirusTotal Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 6.6 26 admin

2139 2020-10-19 10:37 test2.hta  

d8c6560478cca57bb84a2c37228c44bf


Code Injection RWX flags setting unpack itself Windows utilities Windows 		2.2 admin

2140 2020-10-19 10:40 http://google.com  

7c5b5c860e570c3a102b9ad3b70d5250


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Tofsee Windows DNS 		14 6 1 3.6 admin

2141 2020-10-19 10:42 http://google.com  

5c8e481fca1860d15244132ca413e8ea


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Tofsee Windows DNS 		10 5 1 3.6 admin

2142 2020-10-19 10:46 pegasun.exe  

e202bc7ccc1682624be91fe0b86d10ce


MachineGuid Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Windows Browser ComputerName Cryptographic key 		5.8 M admin

2143 2020-10-19 10:47 8yPNq.exe  

72f119c6e945eace409d20d7e6973804


Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 5.8 admin

2144 2020-10-19 10:53 Document13177.xlsb  

136d90dfdc8d28ccfc090f1d09c9bd18


Dridex Malware Creates executable files unpack itself malicious URLs Tofsee DNS 		1 1 3 4.6 guest

2145 2020-10-19 10:53 Document13177.xlsb  

136d90dfdc8d28ccfc090f1d09c9bd18


unpack itself malicious URLs 		1.6 guest

keyword