popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
3916 2020-12-23 18:05 yarobelo.scr  

c7c46db118df6a8d6c9deb69fa6b765b


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 4 1 15.6 M 18 guest

3917 2020-12-23 18:05 winscr.exe  

3574650da1cff1dff8f334feafeadd5a


Troldesh Charming Kitten VirusTotal Malware AutoRuns Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces malicious URLs sandbox evasion Ransomware Windows Tor ComputerName Remote Code Execution DNS 		5 4 9.4 M 59 guest

3918 2020-12-23 18:21 yarobelo.scr  

c7c46db118df6a8d6c9deb69fa6b765b


Browser Info Stealer FTP Client Info Stealer Charming Kitten VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 5 2 15.0 M 18 ZeroCERT

3919 2020-12-23 18:21 YREKQN5ZLNQ.doc  

6a129baf7b95f27a985be69e4bc724c9


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		1 3 3 1 5.0 M 16 ZeroCERT

3920 2020-12-23 18:23 bine.exe  

643d71110f8f60590bd795e97317bd86


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		9.0 M 28 ZeroCERT

3921 2020-12-23 18:24 1ABG7OS11fImC.dll  

858bad49be45f10f8110a16e4f327f46


VirusTotal Malware Malicious Traffic Checks debugger RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 1 6.2 M 15 ZeroCERT

3922 2020-12-23 18:27 io5O6T4F0h7ZH76.dll  

5981b313d6b1882ed0161e200d12232e


VirusTotal Malware Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 1 6.6 M 14 ZeroCERT

3923 2020-12-23 18:27 bine.exe  

643d71110f8f60590bd795e97317bd86


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		17 15 4 10.2 M 28 ZeroCERT

3924 2020-12-23 18:30 R5VVFQEN7P2YCUP.doc  

cab5254b1b78ca7a2c96c4f9d4ba3b40


Vulnerability VirusTotal Malware unpack itself malicious URLs 		3.2 M 14 ZeroCERT

3925 2020-12-23 18:33 regasm.exe  

1d9086709ae0ee4dd4055b9fef5fca4c


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 10 1 12.6 M 20 ZeroCERT

3926 2020-12-23 18:34 R5VVFQEN7P2YCUP.doc  

cab5254b1b78ca7a2c96c4f9d4ba3b40


Vulnerability VirusTotal Malware unpack itself DNS 		3.0 M 14 ZeroCERT

3927 2020-12-24 09:03 svchost.exe  

08ef8917e644417f578ed3be5033a77e


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 10 1 13.2 M 34 ZeroCERT

3928 2020-12-24 09:03 win32.exe  

2f0c8a1bb15284bdbbbe38c24a2aa491


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 10 1 14.0 M 40 ZeroCERT

3929 2020-12-24 09:16 winlog.exe  

c61f9f9c9e4cda47016cfd944778af19


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 8 1 12.8 M 38 ZeroCERT

3930 2020-12-24 09:21 https://ucf7440f11e64fe794a0c8...  

dafe01ff19d72fb69ae0592c98440748


Dridex Malware Code Injection exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 3 4.2 M 28 ZeroCERT

keyword