popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3661 2020-12-10 10:37 iencli12.dotm  

215d80692babc603e1f71bcc07d37d24


malicious URLs 		1.6 guest

3662 2020-12-10 10:38 karma_koin_codes.exe  

82d215a75fb488924bd0b6c9b8eb7c8b


VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger unpack itself malicious URLs Windows DNS Cryptographic key keylogger 		5.4 M 61 guest

3663 2020-12-10 18:46 keygen.exe  

296f45415f8fbf00ec413a5472cb0155


VirusTotal Malware Check memory Checks debugger unpack itself DNS 		3.4 M 24 guest

3664 2020-12-10 18:46 McgjQSIvvkl7ZY4.exe  

ab95033133d0e0b8fe294a0fdadfa3b5


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Ransomware Windows Tor ComputerName crashed 		14.0 M 47 guest

3665 2020-12-10 18:51 McgjQSIvvkl7ZY4.exe  

ab95033133d0e0b8fe294a0fdadfa3b5


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName crashed 		12.8 M 47 guest

3666 2020-12-10 18:52 nd.exe  

d2143133b45d9a684c06edb3b9b2c81c


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Detects VirtualBox Check virtual network interfaces suspicious process malicious URLs WriteConsoleW VMware anti-virtualization Tofsee Windows ComputerName DNS Cryptographic key Software crashed 		38 2 1 12.4 M 38 guest

3667 2020-12-10 19:00 oat.exe  

3c9f99f80db4eda2078a8564afe7185f


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Ransomware Windows Browser Tor Email ComputerName Cryptographic key crashed keylogger 		4 2 1 15.6 M 35 guest

3668 2020-12-10 19:00 OG.exe  

52c1c0a68da545fd829d2b5ed7c2b4f4


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Ransomware Windows Tor ComputerName DNS Cryptographic key crashed 		13.4 M 16 guest

3669 2020-12-10 19:21 OOhms.exe  

0a1251ea53849db102c5a07c0deb63b2


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs Windows ComputerName DNS Cryptographic key 		3.8 M 45 guest

3670 2020-12-10 19:22 op.exe  

7e67efbba22afde4bcabfb39000f726f


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee ComputerName crashed 		38 2 1 6.4 M 22 guest

3671 2020-12-10 22:36 PJAS#104256.xls  

2c37e2b780112b33d40af28f91291e09


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		1 2 1 9.0 M 15 guest

3672 2020-12-10 22:36 output.xls  

f7af5da0b8a984e944868d021d136295


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		1 2 1 9.6 M 12 guest

3673 2020-12-10 22:56 rot.exe  

fb382afd515c00e6347893d2f416ed19


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 5.8 M 41 guest

3674 2020-12-10 22:57 Reycmtl_Signed_.xlsx  

dfba505056fd8177dca4e19a2b18aae1


unpack itself malicious URLs 		2.0 guest

3675 2020-12-10 23:15 svchost2.exe  

d3da2b742449333f758de33b3506409b


VirusTotal Malware PDB MachineGuid Check memory Checks debugger unpack itself malicious URLs 		2.8 M 28 guest

keyword