popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
2626 2020-11-05 11:11 Client.exe  

1e5f3d37e050d773f8798da41b372984


malicious URLs WriteConsoleW 		2.2 admin

2627 2020-11-05 11:22 온라인+학술대회+한시적+지원+관련+Q&A.hwp...  

257a81471a001af1fa0d82069c92993c


VirusTotal Malware Checks debugger Creates shortcut Creates executable files unpack itself malicious URLs DNS 		1 3.8 M 30 guest

2628 2020-11-05 11:43 FILE_336.zip  

47c75f290ec56d8450f333a4deed2494


Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.8 guest

2629 2020-11-05 12:21 c7e640e2617d5fdaa6fc4d50d98ca3...  

6400bca5e8d52210b733f79370449e3b


VirusTotal Email Client Info Stealer Malware Malicious Traffic Checks debugger unpack itself malicious URLs suspicious TLD Tofsee Ransomware Email DNS 		6 14 2 6.2 M 29 guest

2630 2020-11-05 12:44 abc.doc  

9c4bc837af9308a9a4a89220ed106145


VirusTotal Malware buffers extracted exploit crash unpack itself malicious URLs Tofsee Exploit DNS crashed 		3 5 1 5.4 M 31 admin

2631 2020-11-05 13:43 bob.exe  

97cb8ea6cb97811e07cf485bf4187e2f


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed 		9.2 M 41 admin

2632 2020-11-05 13:45 peace.exe  

c74a4de1af2ca02c62ab19625eb98b8b


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed 		9.8 M 24 admin

2633 2020-11-05 13:53 lvs7kabg6ouix3r.exe  

d32acba23526d5c591027df645884b39


Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW human activity check Windows ComputerName DNS 		2 1 14.8 M 53 admin

2634 2020-11-05 18:08 peace.exe  

c74a4de1af2ca02c62ab19625eb98b8b


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed 		9.8 M 24 admin

2635 2020-11-05 18:08 f4n.exe  

1db6bd4d13cb9966e8875b3812aef71d


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Check memory Collect installed applications malicious URLs sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Browser ComputerName Software 		1 4 1 8.6 32 admin

2636 2020-11-05 18:11 vbc.exe  

b95a2c81ccdad3a6515190121cdf4e90


VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder DNS crashed 		1 3.6 14 admin

2637 2020-11-05 18:13 invoice_141144.doc  

4c084f9a7c1a961a35768108ca70e1f5


LokiBot Malware download Malware c&c Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit Trojan DNS crashed Downloader 		2 4 12 4.2 admin

2638 2020-11-05 18:21 26848.exe  

8bac2dfe38653583440ca35fffb5180e


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Buffer PE PDB MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion anti-virtualization VM Disk Size Check installed browsers check Browser Email ComputerName Remote Code Execution DNS Software crashed 		1 1 1 16.8 M 37 admin

2639 2020-11-05 18:22 info.exe  

e2ec666e8f1c920dbdf54816e2350fac


VirusTotal Malware unpack itself Remote Code Execution 		2.6 M 58 admin

2640 2020-11-05 18:23 document.doc  

01a61f8646cf09a907c9876b2a3f0227


LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed Downloader 		2 3 11 4.8 M 16 admin

keyword