popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3781 2020-12-16 16:46 david.exe  

384a7bebd1c1bae53b14e1f02e10fa94


Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		11.4 M ZeroCERT

3782 2020-12-16 16:46 endyx.scr  

6835b462ca256cacbda46400eb1bb7e0


Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Ransomware Windows Browser Email ComputerName DNS Cryptographic key Software 		1 2 3 16.4 M 23 ZeroCERT

3783 2020-12-16 18:16 henryx.scr  

d4f8d10203aece68bcd02d1f0fb27def


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		13.4 M 22 ZeroCERT

3784 2020-12-16 18:16 https://zoomba619.blogspot.com...  

56b8523d141dbaf1c146b923049c9cb5


Dridex VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		29 21 3 5.0 guest

3785 2020-12-16 18:22 I2WExplorer.exe  

af710d76a71abcd42c396ffc0e12cda2


VirusTotal Malware PDB suspicious privilege Check memory Checks debugger unpack itself 		2.4 M 36 ZeroCERT

3786 2020-12-16 18:23 Lab15-03.exe  

bfadb08f07304b6b293707e4f9c9f1a9


VirusTotal Malware Malicious Traffic buffers extracted malicious URLs sandbox evasion WriteConsoleW Tofsee Windows DNS crashed 		6 4 4 5.8 M 45 ZeroCERT

3787 2020-12-17 08:59 Lab16-01.exe  

7faafc7e4a5c736ebfee6abbbc812d80


VirusTotal Malware Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows 		4.6 M 40 ZeroCERT

3788 2020-12-17 09:01 Lab15-03-pr.exe  

cf30e80afa4570f94a066d0264c5a3da


VirusTotal Malware malicious URLs sandbox evasion WriteConsoleW crashed 		2 2 3.4 M 45 ZeroCERT

3789 2020-12-17 09:16 OSW.exe  

f0e54257937a0cce319faf635a3e1f98


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs ComputerName 		2.4 M 15 ZeroCERT

3790 2020-12-17 09:18 prosperx.scr  

9c13e16c165b2a914fd342729e7e919c


VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		1 9.0 M 23 ZeroCERT

3791 2020-12-17 09:36 prosperx.scr  

9c13e16c165b2a914fd342729e7e919c


VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		1 9.0 M 23 ZeroCERT

3792 2020-12-17 09:37 svchost.exe  

d543a59ba12985acaf4134c3ff427b86


NetWireRC VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process malicious URLs VMware anti-virtualization Windows ComputerName DNS Cryptographic key DDNS Software 		2 1 16.8 M 43 ZeroCERT

3793 2020-12-17 09:49 diego.png.exe  

d8a449d9a8aa11d58db91e3dc2387595


VirusTotal Malware unpack itself DNS 		2.4 M 17 ZeroCERT

3794 2020-12-17 09:50 winlog.exe  

926682b2da9a8406bcb427da6a9e00ac


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Trojan DNS Software 		1 2 8 14.4 M 46 ZeroCERT

3795 2020-12-17 10:04 http://www.hahae.co.kr/new3/IS...  

06cfdaf0990fcd6ace527e1ae005e36f


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 3 4.6 ZeroCERT

keyword