popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3076 2024-06-11 14:51 강연의뢰서_ 엄구호 교수님 .docx.lnk...  

52d073c181531c7f0b8b3aa764c6551d


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.4 26 ZeroCERT

3077 2024-06-11 14:47 DocuSign.url  

1bb21d7cfa769080240279276bf0da2e


AntiDebug AntiVM URL Format MSOffice File Malware Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 1 2 4.2 ZeroCERT

3078 2024-06-11 14:45 DocuSign.vbs  

73999f3f3808981c1470956082ebc738

VirusTotal Malware wscript.exe payload download Tofsee 		2 1 1.6 7 ZeroCERT

3079 2024-06-11 14:44 igcc.exe  

13dbe8962d2bbeb39c6bfb0d71690d43


Formbook Generic Malware Malicious Library Antivirus AntiDebug AntiVM .NET EXE PE32 PE File DLL FormBook Browser Info Stealer Malware download VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself suspicious process AppData folder WriteConsoleW Windows Browser ComputerName DNS Cryptographic key 		10 11 2 8 12.8 M 31 ZeroCERT

3080 2024-06-11 14:43 sign_now.vbs  

539544ea65b5ecdb757d49fd92cc335d

VirusTotal Malware wscript.exe payload download Tofsee 		2 1 1.8 11 ZeroCERT

3081 2024-06-11 13:37 강연의뢰서_ 엄구호 교수님 .docx.lnk...  

52d073c181531c7f0b8b3aa764c6551d


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		6.4 26 ZeroCERT

3082 2024-06-11 13:34 cmdline.exe  

ca005ebe9454f30c2cedd73080677f56


Malicious Library Malicious Packer .NET framework(MSIL) .NET EXE PE32 PE File VirusTotal Malware PDB Check memory Checks debugger unpack itself ComputerName 		2.2 32 ZeroCERT

3083 2024-06-11 13:27 c45d209f666f77d70bed61e6fca48b...  

c45d209f666f77d70bed61e6fca48bc2


Generic Malware Antivirus AntiDebug AntiVM Lnk Format GIF Format PowerShell VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		2 7.6 30 ZeroCERT

3084 2024-06-11 13:20 lionsisthekingofjunglewhosuffe...  

b308dd4cfaa85d4a22260a2ce88e1995


MS_RTF_Obfuscation_Objects RTF File doc FormBook Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself suspicious TLD Windows Exploit DNS crashed 		10 12 7 5.4 34 ZeroCERT

3085 2024-06-11 10:50 payload.dll  

43296c4ac197f6feae234bb99e90ad57


Swrort DLL PE32 PE File VirusTotal Malware 		1.2 M 61 r0d

3086 2024-06-11 10:45 Update.exe  

41ba5678a81003f4f12cfda4c800f61f


Generic Malware Malicious Library Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware 		1.4 M 29 ZeroCERT

3087 2024-06-11 09:22 alpha.doc  

4447ab2143a08d8b67f131c4cbd9c316


MS_RTF_Obfuscation_Objects RTF File doc VirusTotal Malware RWX flags setting exploit crash suspicious TLD Tofsee Exploit DNS crashed 		1 2 2 4.0 M 32 ZeroCERT

3088 2024-06-11 09:19 payload.dll  

43296c4ac197f6feae234bb99e90ad57


PE File DLL PE32 VirusTotal Malware 		1.2 61 ZeroCERT

3089 2024-06-11 08:14 Update.exe  

99f4956e54717c033294558697b73fc6


Generic Malware Hide_EXE PDF Suspicious Link Malicious Library Malicious Packer UPX PE File ftp PE32 OS Processor Check DLL Emotet VirusTotal Malware AppData folder Ransomware Windows 		263 4 4 4.0 M 46 ZeroCERT

3090 2024-06-11 07:43 License_counter.exe  

25eef633906e50e331cbb6a2ab4e14a2


Generic Malware Malicious Library UPX PE File ftp PE32 OS Processor Check VirusTotal Malware Malicious Traffic ICMP traffic DNS 		1 3 4.2 M 20 ZeroCERT

keyword