popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3706 2020-12-11 18:35 baron.exe  

a6fb36f357cadbaf2c45e7598b3a8b5d


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		2 5 10.4 M 14 ZeroCERT

3707 2020-12-12 09:56 FTT.exe  

cc5fad28fad2e205e36753bfae4c7277


VirusTotal Malware AutoRuns Windows 		3.8 M 58 guest

3708 2020-12-12 09:58 document.doc  

09b4dc7085245d88d5afdaf7933a2cc2


VirusTotal Malware exploit crash unpack itself malicious URLs Exploit DNS crashed 		1 3 5.8 M 23 guest

3709 2020-12-12 15:15 fw2.exe  

9b8b7fb36bcd5fd0b30b293f6799bb77


VirusTotal Malware unpack itself 		2.0 M 24 guest

3710 2020-12-12 15:16 fw4.exe  

a7ea20176e5493c4c6f7e936a9632271


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Collect installed applications malicious URLs sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Windows Browser ComputerName DNS Cryptographic key Software 		1 3 1 16.6 M 24 guest

3711 2020-12-12 15:27 1210_80556334.doc  

de9538b9867e559105756da43f5c2ad2


Vulnerability VirusTotal Malware Code Injection Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious TLD IP Check ComputerName 		1 6 1 11.4 35 guest

3712 2020-12-12 15:27 fw4.exe  

a7ea20176e5493c4c6f7e936a9632271


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		10.4 M 24 guest

3713 2020-12-12 15:44 soft.exe  

d4d4997b433348f7745b065f1fb2d578


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Check memory buffers extracted Collect installed applications malicious URLs sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Browser ComputerName DNS Software 		1 3 1 10.0 M 56 ZeroCERT

3714 2020-12-12 15:44 RJ48GY8lXm6fMXW.exe  

290d7e0e76c015ae40d502a03b508cff


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Software 		1 7 18.4 M 21 ZeroCERT

3715 2020-12-12 16:11 Update.exe  

bf97f1dcf3b0f3dcedb078aa16535e45


VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee ComputerName crashed 		2 4 1 4.0 M 31 ZeroCERT

3716 2020-12-12 16:12 un.exe  

c586c158732d51fa4b3d5e6f440e0f58


VirusTotal Malware Check memory RWX flags setting unpack itself malicious URLs anti-virtualization DNS 		4.8 M 29 ZeroCERT

3717 2020-12-12 18:34 oosnhsyysjmns.png.exe  

bd1f17c3f5f6d4b8b97bcb4d330daec4


VirusTotal Malware Check memory unpack itself crashed 		2.4 M 21 ZeroCERT

3718 2020-12-12 18:36 svchost.exe  

670d8ac68d823b18a7c41bbd2094c2d9


NetWireRC VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process malicious URLs VMware anti-virtualization Windows ComputerName DNS Cryptographic key DDNS Software 		2 1 15.0 M 24 ZeroCERT

3719 2020-12-13 13:36 look.exe  

c26859c4a7dce369457b656a5922876e


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns PDB suspicious privilege MachineGuid Check memory buffers extracted WMI Creates executable files ICMP traffic unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Windows Browser Email ComputerName DNS crashed Downloader 		3 1 11.6 M 32 ZeroCERT

3720 2020-12-13 13:36 svchost2.exe  

4c7063ec0fb39986822bdb17dfb14ade


VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows DNS DDNS crashed 		1 5 2 5.4 M 22 ZeroCERT

keyword