popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2371 2020-10-28 10:02 gfers.exe  

8d330917b4d7220eb231327236f93c95


VirusTotal Malware unpack itself 		2.0 25 admin

2372 2020-10-28 10:11 16.exe  

db02751a702b316fe074381f82f04965


VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs anti-virtualization Ransomware Windows Tor ComputerName DNS crashed keylogger 		5 6 11.6 M 51 admin

2373 2020-10-28 10:12 2.scr  

f0d8f5b7a0e01207efc16af30462944c


Malware download Amadey Malware AutoRuns MachineGuid Malicious Traffic Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS 		3 6 3 6.4 M admin

2374 2020-10-28 10:15 nono.exe  

d5e700f8d120095ecfc77edc1476c844


VirusTotal Malware Check memory Checks debugger unpack itself Checks Bios Detects VirtualBox malicious URLs WriteConsoleW VMware anti-virtualization Windows ComputerName Cryptographic key Software 		7.6 M 46 admin

2375 2020-10-28 10:16 9.scr  

f0d8f5b7a0e01207efc16af30462944c


Malware download Amadey VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows Tor ComputerName DNS 		3 7 4 8.2 M 56 admin

2376 2020-10-28 10:17 https://valenciaexpresslaundry...  

09ecf62b70523317e0631ad7d50b669b


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		3 3 4.8 admin

2377 2020-10-28 10:21 tyuew.exe  

4fc3c6a6fc4711ad9907fdf45810829c


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Windows DNS Cryptographic key crashed 		4 5 1 12.4 17 admin

2378 2020-10-28 10:21 crypwarzne.exe  

11462f772298d022d297e311c9c4410d


VirusTotal Email Client Info Stealer Malware Buffer PE AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs Windows Browser Email Cryptographic key 		9.4 22 admin

2379 2020-10-28 10:22 Inv_RM55024.exe  

3983beae3cd93351990cb562fd901ae7


Malware download VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check Windows Tor ComputerName DNS Software crashed keylogger 		1 8 8 21.2 M 21 admin

2380 2020-10-28 10:30 https://valenciaexpresslaundry...  

09ecf62b70523317e0631ad7d50b669b


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 3 4.4 admin

2381 2020-10-28 10:34 DOC_96439691.doc  

56a98d4ac1377142220a9cfc737a13b3


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		2 6 5 5.4 M admin

2382 2020-10-28 10:34 fem76rrOZaV1Rmecl.exe  

52d43e04889f414a4822214ea6385746


VirusTotal Malware Report Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 3 1 8.2 13 admin

2383 2020-10-28 10:35 https://achremittanceservices....  

d32109224e04cbdb24ca32fb320f89a1


Dridex Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows Tor DNS 		3 4 2.8 admin

2384 2020-10-28 11:33 99.exe  

e2cd3596bdec815d580dfeadec5209bb


ENERGETIC BEAR VirusTotal Malware suspicious privilege Check memory buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs anti-virtualization Ransomware Windows Tor ComputerName DNS crashed keylogger 		6 6 12.0 M 51 admin

2385 2020-10-28 11:36 oJHstwpndf.exe  

0eec3e7a4adb97d3262da05499627f11


Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check human activity check installed browsers check OskiStealer Stealer Windows Browser Tor Email ComputerName DNS 		9 4 6 18.8 M 25 admin

keyword