popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3766 2020-12-16 09:55 Speeder_1.0.0.3_qd13.exe  

a6d2cae21d592a602211a854dc4dc91a


VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Tofsee Browser ComputerName DNS 		45 16 1 10.6 M 13 ZeroCERT

3767 2020-12-16 10:37 vbc.exe  

ebc762f4d1d6557fcfb73fc7eb1d5b7a


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Software 		1 2 7 1 14.2 M 46 ZeroCERT

3768 2020-12-16 10:37 win32.exe  

f4fccdb6286107ca3592406e356a6b5e


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Trojan DNS Software 		1 2 10 1 15.0 M 38 ZeroCERT

3769 2020-12-16 11:06 XokBnqWMZ4B9pbd.exe  

e9dbec32351a5bd0a3f94b8314e4d958


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Software 		1 17.6 M 43 ZeroCERT

3770 2020-12-16 12:23 1312.gif.1.exe  

b2a9a4e1656bdb5749de4f228dc9f307


VirusTotal Malware 		1.8 M 41 ZeroCERT

3771 2020-12-16 12:23 1SystemWindows.exe  

d100a087bc378ea7fb3afc39bc164984


VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Tofsee Windows DNS 		4 2 4 3.8 M 39 ZeroCERT

3772 2020-12-16 12:50 http://54.169.255.180/.cache/A...  

ff1f1a2332f563aebf955780642344f1


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		1 1 6 5.0 13 ZeroCERT

3773 2020-12-16 16:17 1312.gif.2.exe  

d41d8cd98f00b204e9800998ecf8427e

 0.4 ZeroCERT

3774 2020-12-16 16:18 1312.gif.3.exe  

b2a9a4e1656bdb5749de4f228dc9f307


VirusTotal Malware DNS 		2.4 M 41 ZeroCERT

3775 2020-12-16 16:23 5555555555.jpg.exe  

613062734b9244597bee0607b8432e9f

 1.0 ZeroCERT

3776 2020-12-16 16:23 chidu.exe  

994caae4cc6731bdb8447a8b13314f68


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		13.8 M 40 ZeroCERT

3777 2020-12-16 16:27 csrs.exe  

3a94c5b0350d50bf1485156e75a82ded


VirusTotal Malware Buffer PE Check memory buffers extracted Creates executable files unpack itself AppData folder malicious URLs 		5.2 M 47 ZeroCERT

3778 2020-12-16 16:27 CKC.exe  

7379d1bbf5b0a85cade31143413cf9e6


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs IP Check Windows ComputerName DNS Cryptographic key crashed 		1 2 1 10.0 M 15 ZeroCERT

3779 2020-12-16 16:34 CKC.exe  

7379d1bbf5b0a85cade31143413cf9e6


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs IP Check Windows ComputerName Cryptographic key crashed 		1 2 1 9.4 M 15 ZeroCERT

3780 2020-12-16 16:35 damianox.scr  

b41a91991dcb97e8e7d43c368cc58c57


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		11.6 M 22 ZeroCERT

keyword