popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
32911 2022-03-31 13:45 202203 BTCETH 추가계정정보.docx...  

2677f9871cb340750e582cb677d40e81


Word 2007 file format(docx) VirusTotal Malware unpack itself 		5 2 2.4 24 ZeroCERT

32912 2022-03-31 13:42 vbaProject.bin.doc  

4520cad706d5dfc7df2250b487dcf020


VBA_macro Generic Malware MSOffice File VirusTotal Malware unpack itself 		2.0 21 ZeroCERT

32913 2022-03-31 13:39 accountTemplate0330.zip.docx  

1559aeb8e464759247e4588cb6a09877


VBA_macro Word 2007 file format(docx) VirusTotal Malware unpack itself 		1.8 19 ZeroCERT

32914 2022-03-31 13:35 Invoice_ 19075.16_10.doc  

a8eda3039c4cbbb362eb5847ed38e37a


Gen1 Emotet VBA_macro Generic Malware Malicious Packer Malicious Library UPX MSOffice File PE32 PE File VirusTotal Malware suspicious privilege Creates executable files unpack itself AppData folder 		1 1 6.8 49 ZeroCERT

32915 2022-03-31 11:33 NFT-1425656790-Mar-29.xlsb  

d0d98ee06e93c648e985d39b6e8aaf37


Malicious Library Excel Binary Workbook file format(xlsb) VirusTotal Malware Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself suspicious process Exploit DNS crashed 		1 3 1 7.2 M 10 guest

32916 2022-03-31 11:27 MHR.exe  

8d5fd2c8bc4d982da1c485cf74c46765


Generic Malware Malicious Packer DNS AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 1 14.6 M 34 r0d

32917 2022-03-31 11:10 vbc.exe  

5b9d23eb5a8f6d5578897abbecfe3d37


Formbook AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself 		7.6 M 38 r0d

32918 2022-03-31 10:57 7718681721587271.xls  

4077736d3a04cc2c292eb21e04abd768


emotet Excel with Emotet MS_Excel_Hidden_Macro_Sheet Malicious Library UPX MSOffice File OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot VirusTotal Malware Report AutoRuns Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Kovter Windows Exploit ComputerName DNS crashed 		6 24 9 1 10.0 M 18 ZeroCERT

32919 2022-03-31 10:55 00675281126.xls  

f284cb44aba6ee6f4aa83086ed8dc951


Excel with Emotet MS_Excel_Hidden_Macro_Sheet Malicious Library UPX MSOffice File OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot VirusTotal Malware Report AutoRuns Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Kovter Windows Exploit ComputerName DNS crashed 		6 24 9 10.2 M 20 ZeroCERT

32920 2022-03-31 10:54 MHR.exe  

8d5fd2c8bc4d982da1c485cf74c46765


DNS AntiDebug AntiVM .NET EXE PE32 PE File Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS DDNS 		2 2 13.6 M 34 ZeroCERT

32921 2022-03-31 10:53 eEusN3GN6vDF.exe  

4fff25327afeda87f089e27a6f62a03f


ASProtect PE32 PE File VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself sandbox evasion Windows ComputerName DNS Cryptographic key 		1 9.0 M 45 ZeroCERT

32922 2022-03-31 10:51 vbc.exe  

5b9d23eb5a8f6d5578897abbecfe3d37


[m] Generic Malware AntiDebug AntiVM .NET EXE PE32 PE File FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious TLD DNS 		11 28 2 3 8.8 M 38 ZeroCERT

32923 2022-03-31 10:51 qfWEQrrwBg  

16427c3406c7f8a4da826971ac2b5a43


Malicious Library UPX OS Processor Check DLL PE32 PE File Dridex TrickBot Malware Report Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		20 5 5.8 ZeroCERT

32924 2022-03-31 10:51 6454269803989995.xls  

046e89fbbbd8d4c48200a5afad3c865e


Excel with Emotet MS_Excel_Hidden_Macro_Sheet Malicious Library UPX MSOffice File OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot VirusTotal Malware Report AutoRuns Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Kovter Windows Exploit ComputerName DNS crashed 		6 24 9 10.4 19 ZeroCERT

32925 2022-03-31 10:49 FjgB6I  

dec4691f828115b1a5e1481de933fba9


Malicious Library UPX OS Processor Check DLL PE32 PE File Dridex TrickBot Malware Report Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		20 5 5.8 ZeroCERT

keyword