popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3061 2020-11-16 18:30 sendhookfile.exe  

7555e7e8511af8c51837674d79f6e391


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs ComputerName 		3.0 M 58 guest

3062 2020-11-16 23:19 10674100.jpg.exe  

a8d086952534df0b84fbd100e0b39f7d


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs IP Check human activity check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger 		2 5 5 10.2 M 29 ZeroCERT

3063 2020-11-16 23:28 BOQ8600.txt.exe  

5f3d7585543a71950085cb925730494e


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName Cryptographic key 		1 2 1 12.2 M 17 ZeroCERT

3064 2020-11-16 23:28 invoice_141147.doc  

c11c7bd737d1dcf126e3cea347737ae6


LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit Trojan DNS crashed Downloader 		1 5 12 1 5.6 M 25 ZeroCERT

3065 2020-11-16 23:37 vbc.exe  

ffdeea6205f5911f3e7d7b103308c3e2


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 10 1 7.8 M 67 ZeroCERT

3066 2020-11-16 23:41 BOQ8600.txt.exe  

5f3d7585543a71950085cb925730494e


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName Cryptographic key 		1 2 1 12.2 M 17 ZeroCERT

3067 2020-11-16 23:43 web ori2.exe  

3b7b6e39851547b367a5f4e398cea7bd


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		5 1 19.0 M 12 ZeroCERT

3068 2020-11-16 23:47 Setup.exe  

142a8356420248e2ccbfa977b576279c


VirusTotal Malware Check memory Checks debugger WMI unpack itself ComputerName 		2.8 16 ZeroCERT

3069 2020-11-16 23:51 svchost.exe  

9044b597dc455f00b922491411426ef6


VirusTotal Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs ComputerName DNS 		2 1 6.2 M 43 ZeroCERT

3070 2020-11-16 23:53 arch64.exe  

62993bb7deb866e9d52ac4221d266468


VirusTotal Malware RWX flags setting unpack itself Windows utilities suspicious process malicious URLs Windows ComputerName DNS 		2 2 5.8 38 ZeroCERT

3071 2020-11-17 07:21 http://download.logins.online/...  

9f566a164a5c6ae046c24d0e911dc577


Dridex VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 3 3 4.6 6 guest

3072 2020-11-17 07:30 http://stoplyingme.com/pdf/nas...  

d9e4ff69934ce995feaa9e54e0d5ad07


VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities malicious URLs Windows Exploit DNS crashed 		1 3 1 5.6 ZeroCERT

3073 2020-11-17 09:03 document-1559797301.xlsb  

b716cc176fe7a6c664ee428bcda1704e


unpack itself malicious URLs 		1.6 ZeroCERT

3074 2020-11-17 09:08 161120.gif.exe  

62796a07ec927fa798d39dbcaa16a967


unpack itself Remote Code Execution 		1.4 M ZeroCERT

3075 2020-11-17 09:09 document-1559797301.xlsb  

b716cc176fe7a6c664ee428bcda1704e


unpack itself malicious URLs 		2.0 ZeroCERT

keyword