popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
32956 2022-03-30 18:23 NFT-435309562-Mar-29.xlsb  

ff129562f76e5ade550fd0ca90cfa276


Malicious Library Excel Binary Workbook file format(xlsb) VirusTotal Malware Malicious Traffic Creates executable files unpack itself suspicious process DNS 		3 3 3 4.8 M 11 guest

32957 2022-03-30 14:32 0305.ps1  

cbfb80336f25ea741a7fdc87b01c2132


Generic Malware Antivirus HWP PS PostScript .NET DLL DLL PE32 PE File MSOffice File Malware powershell Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces AppData folder WriteConsoleW Windows ComputerName DNS Cryptographic key 		3 1 2 11.6 ZeroCERT

32958 2022-03-30 13:27 서울지방조달청 주간입찰동향 220328.220401.h...  

0362ed9e9a3741a3eebfe491b4d3db49


MSOffice File GIF Format Checks debugger Creates shortcut Creates executable files unpack itself 		1.4 ZeroCERT

32959 2022-03-30 11:37 qJaxG4C1KG20iG3zUV1T3vpmpyqVI  

ca3adf8d5966fd42574159498c7548fd


emotet Excel with Emotet MS_Excel_Hidden_Macro_Sheet MSOffice File VirusTotal Malware Creates executable files RWX flags setting exploit crash unpack itself suspicious process Exploit crashed 		2 3 1 4.4 M 13 ZeroCERT

32960 2022-03-30 11:15 инструкция_ркн.doc  

341610a5a0cc430f99f9f9bd694b04a9


VBA_macro Generic Malware Antivirus MSOffice File VirusTotal Malware powershell suspicious privilege Check memory Checks debugger WMI Creates shortcut RWX flags setting exploit crash unpack itself Check virtual network interfaces suspicious process Tofsee Windows Exploit ComputerName Cryptographic key crashed 		1 4 1 10.0 29 ZeroCERT

32961 2022-03-30 11:13 0.ps1  

1073f4f0b62cc79342a1eb72a4c4da50


Hide_EXE Generic Malware Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows Cryptographic key 		1.4 M 9 ZeroCERT

32962 2022-03-30 10:57 NFT-1167138087-Mar-29.xlsb  

08a5512995009c9f36fb39f077b49c6e


Malicious Library Excel Binary Workbook file format(xlsb) Malware Malicious Traffic Creates executable files unpack itself suspicious process DNS 		3 3 4.2 guest

32963 2022-03-30 10:57 NFT-2053667904-Mar-29.xlsb  

7733c814183b3b21b18e97d86036c6de


Malicious Library Excel Binary Workbook file format(xlsb) Malware Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself suspicious process Exploit DNS crashed 		3 3 5.2 guest

32964 2022-03-30 10:53 HkvWahS6osjcp1g.ps1  

4d499b6d7b4106c52e650607cd9e25e7


emotet Generic Malware Antivirus powershell Check memory WMI unpack itself Check virtual network interfaces Tofsee Windows ComputerName Cryptographic key 		1 4 1 1 4.0 ZeroCERT

32965 2022-03-30 10:52 инструкция_ркн.doc  

341610a5a0cc430f99f9f9bd694b04a9


VBA_macro Generic Malware MSOffice File VirusTotal Malware unpack itself 		2.4 29 ZeroCERT

32966 2022-03-30 10:50 Charter flight details.pdf.vbs  

d6a52997063b44b68dee4f2557f0b00d


Generic Malware Antivirus PowerShell Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 2 10.0 ZeroCERT

32967 2022-03-30 10:35 inj3ct_svc.ps1  

9ee2d346c37304f4d2c3baeb5cb96932


Generic Malware Antivirus .NET DLL DLL PE32 PE File Code Injection Check memory buffers extracted Creates executable files unpack itself Windows utilities AppData folder WriteConsoleW Windows Cryptographic key 		5.0 ZeroCERT

32968 2022-03-30 10:24 drop.ps1  

77b151a3b481c823337837820b6cf717


PWS[m] NPKI Gen2 Emotet Hide_EXE Generic Malware Antivirus Malicious Library UPX AntiDebug AntiVM GIF Format DLL PE32 PE File OS Processor Check powershell Buffer PE AutoRuns MachineGuid Code Injection Check memory buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS Cryptographic key 		5 11.6 ZeroCERT

32969 2022-03-30 10:02 61W0ovBu86  

3b11a40e721dc4d5ed7b931b6f707001


Malicious Packer Malicious Library UPX OS Processor Check DLL PE32 PE File Dridex TrickBot VirusTotal Malware Report Checks debugger RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		21 10 5.8 M 35 ZeroCERT

32970 2022-03-30 09:57 77608712197934571105.xls  

33359d166fbabd653dcdb6bb53d35cd4


emotet Excel with Emotet Emotet Gen2 Gen1 MS_Excel_Hidden_Macro_Sheet Malicious Packer Malicious Library UPX MSOffice File OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot Malware Report AutoRuns Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Kovter Windows Exploit ComputerName DNS crashed 		4 46 13 3 9.8 M ZeroCERT

keyword