popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2386 2020-10-28 11:38 aPfjegjaF.exe  

6d8eb085d7dfcfdd55f26262e51fbfdc


Browser Info Stealer Emotet Malware download FTP Client Info Stealer Vidar Azorult Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Ransomware Interception Zeus OskiStealer Stealer Windows Browser Email ComputerName Cryptographic key Software crashed Downloader 		16 9 11 27.4 M admin

2387 2020-10-28 12:18 dat-730044.doc  

86383b38ce26730817e15b0ae7191437


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		2 3 4 4.4 M admin

2388 2020-10-28 12:26 reqrm.exe  

cc219392a073e3c644174607af417b93


Malware download Azorult VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Windows Browser ComputerName Cryptographic key 		1 2 1 14.4 38 admin

2389 2020-10-28 12:26 Electronic form.doc  

eb6a6943bf8db6a0c7003c1c869b3323


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		3 6 1 6.0 M 14 admin

2390 2020-10-28 18:06 link.exe  

a9cbc59987ec442437ffea45aade05ba


Dridex VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Tofsee Windows ComputerName Cryptographic key 		1 2 4 9.4 M 40 admin

2391 2020-10-28 18:14 5j03vVHmJpg.exe  

0dd348f4aa94c0be2e84561dda14eac0


Malware Malicious Traffic Check memory RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 6.0 M admin

2392 2020-10-28 18:15 pinac33fb.exe  

d204e66e0d2ca29b4c382818fa44e710


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs Windows Cryptographic key 		10.4 23 admin

2393 2020-10-28 18:15 office99fb.exe  

5bc7fe05cc6777e298f4af807926dfe6


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs Windows Cryptographic key 		10.4 20 admin

2394 2020-10-28 18:28 office99fb.exe  

5bc7fe05cc6777e298f4af807926dfe6


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs Windows Cryptographic key 		1 3 11.2 M 20 admin

2395 2020-10-28 18:29 pinac33fb.exe  

d204e66e0d2ca29b4c382818fa44e710


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs Windows Cryptographic key 		2 4 11.2 M 23 admin

2396 2020-10-28 18:38 form.doc  

77153b25765b8f500ec3b9199fde031a


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		2 4 3 6.0 M 10 admin

2397 2020-10-28 18:45 antidami32kl.exe  

a6b913ac4445753786c8e62a08df5449


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs Ransomware Windows Tor ComputerName Cryptographic key crashed 		13.8 M 22 admin

2398 2020-10-28 18:46 FD-6507.jpg.exe  

db8548d27da86c27809420b5ef7143b0


AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs Ransomware Windows Tor ComputerName Cryptographic key crashed 		12.4 M admin

2399 2020-10-28 18:50 invoice.doc  

373cb701b632ae6397bf97b0b3f6336b


Vulnerability VirusTotal Malware exploit crash unpack itself malicious URLs Windows Exploit crashed 		1 2 1 4.8 M 25 admin

2400 2020-10-28 18:53 INV_6347.doc  

b78a1fa8b1dfc94a57d1a35c3953e1fa


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		2 4 3 6.0 M 10 admin

keyword