popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2146 2020-10-19 10:54 Document13177.xlsb  

136d90dfdc8d28ccfc090f1d09c9bd18


unpack itself 		0.8 guest

2147 2020-10-19 10:55 https://docsecure.top/xls/0051...  

1857ec35df81a3cb7fe02c9382ba3be7


Dridex TrickBot Vulnerability VirusTotal Malware MachineGuid Code Injection Malicious Traffic Checks debugger exploit crash unpack itself Windows utilities Tofsee Kovter Windows Exploit DNS crashed 		3 3 4 7.2 M admin

2148 2020-10-19 11:13 OperaSetup.exe  

ff4661ec5bef09ac7fcf479c933d2d81


Malware Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Tofsee Remote Code Execution DNS 		5 4 1 5.4 guest

2149 2020-10-19 11:16 https://docsecure.top/111.exe  

ff47e6eb2602178a4306e4fcecb15b7d


Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Report suspicious privilege Code Injection buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Kovter Windows Exploit ComputerName DNS crashed 		2 7 8 8.4 admin

2150 2020-10-19 11:16 https://docsecure.top/xls/0099...  

fd26ed0c60e78722e574799704209d23


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 2 7.0 M admin

2151 2020-10-19 13:18 https://docsecure.top/xls/0099...  

fd26ed0c60e78722e574799704209d23


Dridex TrickBot Vulnerability VirusTotal Malware MachineGuid Code Injection Malicious Traffic Checks debugger exploit crash unpack itself Windows utilities malicious URLs suspicious TLD Tofsee Kovter Windows Exploit DNS crashed 		3 5 4 8.8 M guest

2152 2020-10-19 13:59 1610.gif.exe  

d831b3b3fb3030a9f9a1e9259105e57b


VirusTotal Malware unpack itself malicious URLs WriteConsoleW ComputerName Remote Code Execution 		1 3.4 36 guest

2153 2020-10-19 14:18 1610.gif.exe  

d831b3b3fb3030a9f9a1e9259105e57b


VirusTotal Malware malicious URLs WriteConsoleW ComputerName Remote Code Execution 		1 2.4 M 36 admin

2154 2020-10-19 14:24 0810.gif.exe  

ca26ad3cfd67703c3e7a4855407725b5


VirusTotal Malware unpack itself 		1 2.2 M 46 admin

2155 2020-10-19 15:01 test.html  

d41d8cd98f00b204e9800998ecf8427e


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		1 2 3 3.8 guest

2156 2020-10-19 15:18 https://docsecure.top/xls/0099...  

fd26ed0c60e78722e574799704209d23


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger exploit crash unpack itself Windows utilities malicious URLs suspicious TLD Tofsee Windows Exploit DNS crashed 		2 4 2 7.8 M guest

2157 2020-10-19 16:05 https://docsecure.top/xls/0099...  

fd26ed0c60e78722e574799704209d23


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger exploit crash unpack itself Windows utilities malicious URLs suspicious TLD Tofsee Windows Exploit DNS crashed 		2 4 2 7.8 M guest

2158 2020-10-19 16:12 0810.gif.exe  

ca26ad3cfd67703c3e7a4855407725b5


VirusTotal Malware 		1 1.8 M 46 admin

2159 2020-10-19 16:13 https://docsecure.top/xls/0099...  

fd26ed0c60e78722e574799704209d23


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger exploit crash unpack itself Windows utilities malicious URLs suspicious TLD Tofsee Windows Exploit DNS crashed 		2 4 2 7.8 M guest

2160 2020-10-19 16:23 0810.gif.exe  

ca26ad3cfd67703c3e7a4855407725b5


VirusTotal Malware unpack itself 		1 2.2 M 46 admin

keyword