popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3631 2020-12-08 21:36 pg.exe  

3f0522e4c0cff4215079b36695cdd78f


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Ransomware Windows Tor ComputerName Cryptographic key crashed 		13.4 M 44 ZeroCERT

3632 2020-12-08 21:37 regasm.exe  

e55da166e7ba466275234e9ee6b2a568


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Software 		1 1 13.6 23 ZeroCERT

3633 2020-12-08 21:39 pg.exe  

3f0522e4c0cff4215079b36695cdd78f


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed 		12.2 M 44 ZeroCERT

3634 2020-12-08 21:40 regasm.exe  

e55da166e7ba466275234e9ee6b2a568


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Software 		1 1 13.6 23 ZeroCERT

3635 2020-12-09 00:22 run.exe  

39c2a273de3f1eee2dd6e567a00f1137


VirusTotal Malware Checks debugger RWX flags setting unpack itself malicious URLs Tofsee ComputerName DNS 		7 6 1 4.8 M 55 ZeroCERT

3636 2020-12-09 00:22 remeus.exe  

9bf1c67dbbc2b863c6254ef7415bb434


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Collect installed applications Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 10 6 18.8 26 ZeroCERT

3637 2020-12-09 07:56 http://107.155.162.25/win/dati...  

ded38d3faf45c6798e0a430d060cd68c


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 1 6 6.0 ZeroCERT

3638 2020-12-09 11:41 remeus.exe  

9bf1c67dbbc2b863c6254ef7415bb434


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs IP Check installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 9 2 17.2 42 r0d

3639 2020-12-09 13:30 scriptxls_799079b3-8d0f-45bc-9...  

85070f4325ad66976ac4a728fb393783


powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 7.6 M ZeroCERT

3640 2020-12-09 13:31 vbc.exe  

3b0789ad71be68843bf97f5885b03326


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS Cryptographic key crashed 		10.8 M 43 ZeroCERT

3641 2020-12-09 15:54 온라인+학술대회+한시적+지원+관련+Q&A.hwp...  

257a81471a001af1fa0d82069c92993c


VirusTotal Malware Checks debugger Creates shortcut Creates executable files unpack itself malicious URLs 		3.0 M 28 r0d

3642 2020-12-09 18:04 warEXT.gif.exe  

3e86685246c1fdcc9eef8b95986ba4e4


VirusTotal Malware Code Injection buffers extracted unpack itself crashed 		6.6 M 66 ZeroCERT

3643 2020-12-09 18:05 warCS.gif.exe  

e5b54ad94c5af53fe63de33113e8ebc3


Emotet VirusTotal Malware Buffer PE Code Injection buffers extracted unpack itself malicious URLs crashed 		8.8 M 65 ZeroCERT

3644 2020-12-09 18:06 온라인+학술대회+한시적+지원+관련+Q&A.hwp...  

257a81471a001af1fa0d82069c92993c


VirusTotal Malware Checks debugger Creates shortcut Creates executable files unpack itself malicious URLs DNS 		3.6 M 28 r0d

3645 2020-12-09 18:09 warEXT.gif.exe  

3e86685246c1fdcc9eef8b95986ba4e4


VirusTotal Malware Code Injection buffers extracted unpack itself crashed 		6.6 M 66 ZeroCERT

keyword