popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3076 2020-11-17 09:19 e3txkz.pdf.exe  

a19e9a48a5adb409f2eed82694231a7a


VirusTotal Malware PDB unpack itself DNS crashed 		2.4 M 12 ZeroCERT

3077 2020-11-17 09:19 document.doc  

a19eabf7fb153b7d9481cbd5a2957e5d


VirusTotal Malware Malicious Traffic exploit crash unpack itself malicious URLs Exploit DNS crashed Downloader 		1 1 2 5.2 M 27 ZeroCERT

3078 2020-11-17 09:27 nass.exe  

d9e4ff69934ce995feaa9e54e0d5ad07


suspicious privilege Check memory Checks debugger unpack itself malicious URLs 		2.4 M ZeroCERT

3079 2020-11-17 09:28 LinK13112020.msi  

9f566a164a5c6ae046c24d0e911dc577


VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself malicious URLs AntiVM_Disk VM Disk Size Check ComputerName 		1 2 3.8 M 6 ZeroCERT

3080 2020-11-17 09:34 peggs.exe  

393e5a7fe1d4a719890fe46e7049301a


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware MachineGuid Malicious Traffic Check memory buffers extracted ICMP traffic unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser Email ComputerName DNS Software Downloader 		8 4 4 13.8 M 43 ZeroCERT

3081 2020-11-17 09:35 pegasun.exe  

e73e257a21c192c734e5fda707f526c4


VirusTotal Malware malicious URLs 		1 2.8 M 51 ZeroCERT

3082 2020-11-17 09:49 pegs.exe  

42e13e9fb45e01c567b6d3c34caab781


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware MachineGuid Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Tofsee Windows Browser Email ComputerName Remote Code Execution DNS Software Downloader 		7 4 4 13.0 M 27 ZeroCERT

3083 2020-11-17 09:50 uinm.exe  

9a14f154a2bd1be68a91bab0118cdd6b


Malware Malicious Traffic Check memory Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows 		2 2 4.2 M ZeroCERT

3084 2020-11-17 09:51 pegoos.exe  

e8b534f89b0f23446b410e47ded4a76f


Malware download VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Tofsee Windows Browser ComputerName WordPress Downloader 		8 6 5 9.4 M 20 ZeroCERT

3085 2020-11-17 17:10 http://naver.midsecurity.org/a...  

c731e705a5baf082bf3ffc72b6b77699


Dridex VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		10 12 3 5.0 2 guest

3086 2020-11-17 17:14 바이든 시대 북한 비핵화 협상의 또 하나암초 - 북한 ...  

164839a72dba24d189c1d990e61a53e2


unpack itself malicious URLs 		2.0 guest

3087 2020-11-17 17:51 바이든 시대 북한 비핵화 협상의 또 하나암초 - 북한 ...  

c0c9b52ce51df46422e4fa14178beeec


VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process malicious URLs Interception Browser ComputerName 		2 7.4 M 30 guest

3088 2020-11-17 18:31 411.exe  

2398469593c9dec9561a556b30f6d63a


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs Ransomware Windows Tor ComputerName Cryptographic key crashed 		14.4 M 29 ZeroCERT

3089 2020-11-17 18:31 ago.exe  

0b1e53072e91e0d71e3db6b2720d2ee8


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed 		8.4 M 43 ZeroCERT

3090 2020-11-17 18:42 411.exe  

2398469593c9dec9561a556b30f6d63a


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs Windows ComputerName Cryptographic key crashed 		13.2 M 29 ZeroCERT

keyword