popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3736 2020-12-15 09:57 5555555555.jpg.1.exe  

dea15b8a17ac4f78c996d37606d6d625


Check memory unpack itself crashed 		1.4 guest

3737 2020-12-15 09:59 https://motlolidk.blogspot.com...  

2db656fc18c4717337f9d581296601d2


Dridex VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		26 21 3 5.0 M guest

3738 2020-12-15 10:10 5555555555.jpg.exe  

dea15b8a17ac4f78c996d37606d6d625


Check memory unpack itself crashed 		1.4 guest

3739 2020-12-15 10:13 AQW.exe  

fa2d232572f85b32aa2145cca35d13ff


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself suspicious process malicious URLs Windows ComputerName DNS Cryptographic key crashed keylogger 		2 15.4 M 36 guest

3740 2020-12-15 11:04 DELYG8nMFe9RxD9lR6.exe  

69db731bb7943d8f8b20995d0dbf64e2


Report ICMP traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Browser Advertising ComputerName Remote Code Execution DNS Cryptographic key 		7 5 7.2 r0d

3741 2020-12-15 12:58 bin.exe  

9b61c80ef5a2c160718ef3550985be43


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		9.4 M 22 ZeroCERT

3742 2020-12-15 12:58 bin2.exe  

4c512f97ee6ca51c5e68d7b3d107bc61


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		8.4 M 24 ZeroCERT

3743 2020-12-15 13:05 bin.exe  

9b61c80ef5a2c160718ef3550985be43


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder malicious URLs Windows Cryptographic key 		6 6 12.6 M 22 ZeroCERT

3744 2020-12-15 13:06 bin2.exe  

4c512f97ee6ca51c5e68d7b3d107bc61


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		9 10 10.2 M 24 ZeroCERT

3745 2020-12-15 14:33 binl.exe  

963f555140e20e291c2fac67a5186c15


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		8.6 M 18 ZeroCERT

3746 2020-12-15 14:33 cax.exe  

a88c0408e7888f549e40940279758fa6


VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs Tofsee Interception DNS crashed 		1 4 1 6.4 M 38 ZeroCERT

3747 2020-12-15 14:40 DEKK.scr  

96415c7cc22dc59c3c112c02b3fecf2e


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 2 1 5.6 M 32 ZeroCERT

3748 2020-12-15 14:41 binl.exe  

963f555140e20e291c2fac67a5186c15


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		12 13 9.8 M 18 ZeroCERT

3749 2020-12-15 14:44 DOC_69061004.doc  

ce9a45e819d63dfea62902796a33a307


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee 		1 15 3 4.6 M 44 ZeroCERT

3750 2020-12-15 15:02 DIEN CT AP001-2020-DEC15.scr  

cdb5263c2d9c614ff624decc25c2d15b


Browser Info Stealer Email Client Info Stealer Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check Windows Browser Email ComputerName DNS 		1 16.2 guest

keyword