popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
32971 2022-03-30 09:56 shp_778.doc  

9c8a32a51063bf0216afc4477f897a62


MS_RTF_Obfuscation_Objects RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 7 4.4 M 28 ZeroCERT

32972 2022-03-30 09:31 UX4uAkEF_mly3l-jeKbm5VNwoPkAnP...  

bf5309d3536cb55f8a052ad35576866f


Malicious Library PE File PE64 VirusTotal Malware crashed 		0.8 6 ZeroCERT

32973 2022-03-30 09:29 shp_778.doc  

9c8a32a51063bf0216afc4477f897a62


RTF File doc VirusTotal Malware buffers extracted RWX flags setting exploit crash Exploit crashed 		3.0 M 28 ZeroCERT

32974 2022-03-30 09:28 POqJKcxiIzRb  

a6d09f5a2f3db9a5b75f38ebb3d152e0


Emotet Gen2 Gen1 Malicious Packer Malicious Library UPX OS Processor Check DLL PE32 PE File Dridex TrickBot Malware Report Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		38 9 5.6 ZeroCERT

32975 2022-03-30 09:27 3933338074.xls  

33359d166fbabd653dcdb6bb53d35cd4


Excel with Emotet Emotet Gen2 Gen1 MS_Excel_Hidden_Macro_Sheet Malicious Packer Malicious Library UPX MSOffice File OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot Malware Report AutoRuns Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Kovter Windows Exploit ComputerName DNS crashed 		3 46 13 9.4 ZeroCERT

32976 2022-03-30 09:25 vbc.exe  

efd638102b94041f24a6b614a46e0f70


Malicious Library UPX Admin Tool (Sysinternals etc ...) PE32 PE File Emotet VirusTotal Malware AutoRuns Code Injection buffers extracted RWX flags setting unpack itself Windows RCE crashed 		1 2 6.6 M 23 ZeroCERT

32977 2022-03-30 09:23 dhmax.exe  

943cae40ccc382396e53d1a5463fe64e


Malicious Library UPX PE32 PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself DNS 		5 9 3 5.8 M 47 ZeroCERT

32978 2022-03-30 09:21 18828003913961386761.xls  

b9b9c3971b89c4872d4929c2c1444998


Excel with Emotet Emotet Gen2 Gen1 MS_Excel_Hidden_Macro_Sheet Malicious Packer Malicious Library UPX MSOffice File OS Processor Check DLL PE32 PE File Malware download Dridex TrickBot Malware Report AutoRuns Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Auto service suspicious process AntiVM_Disk sandbox evasion VM Disk Size Check Tofsee Kovter Windows Exploit ComputerName DNS crashed 		4 44 13 9.8 ZeroCERT

32979 2022-03-30 08:56 T5qXAR8p5  

8308537ddc1d48fc80c5bbb69f51a3d3


Emotet Gen2 Gen1 Malicious Packer Malicious Library UPX OS Processor Check DLL PE32 PE File Dridex TrickBot Malware Report Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		39 9 5.6 ZeroCERT

32980 2022-03-30 08:54 STC.exe  

b933b611ce9fad4e6ea2a50a45388039


Generic Malware Malicious Packer Malicious Library UPX OS Processor Check PE32 PE File VirusTotal Malware Check memory Windows DNS DDNS keylogger 		2 1 3.0 52 ZeroCERT

32981 2022-03-30 07:46 m  

d2a98352ab04ddb94abcf6a85d71d2a8


Emotet Gen2 Gen1 Malicious Packer Malicious Library UPX OS Processor Check DLL PE32 PE File Dridex TrickBot VirusTotal Malware Report Checks debugger ICMP traffic RWX flags setting unpack itself sandbox evasion Kovter ComputerName RCE DNS 		38 9 6.4 23 ZeroCERT

32982 2022-03-30 07:31 putty.exe  

e98774bee4ed490089f6c63b6c676112


RAT Malicious Packer PE File PE64 VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.8 45 ZeroCERT

32983 2022-03-30 03:53 https://00f74ba44b39217d048f63...  


PWS[m] Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Downloader Escalate priviledges persistence FTP Http API AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 2 4.2 guest

32984 2022-03-30 01:42 https://pbs.twimg.com/profile_...  

537b0d945f6625eb5e9bc1171b2d5d40


PWS[m] Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Downloader Escalate priviledges persistence FTP Http API AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.8 guest

32985 2022-03-30 01:42 https://cmsreg.dto.kemkes.go.i...  

d85e82376efe2404aa99a01422f2ce77


PWS[m] Create Service DGA Socket ScreenShot DNS Internet API Code injection Hijack Network Sniff Audio HTTP Steal credential KeyLogger P2P Downloader Escalate priviledges persistence FTP Http API AntiDebug AntiVM PNG Format MSOffice File JPEG Format Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.2 Greytroya

keyword