popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
41176 2021-09-25 10:57 9yub0of.ico  

b154189e0bcbf2556452a4d510d7043f


VirusTotal Malware 		0.4 M 3 ZeroCERT

41177 2021-09-25 10:47 file.exe  

cb2519c7618babe98a785cd7bd1485b4


Malicious Packer UPX Admin Tool (Sysinternals etc ...) Malicious Library PE File OS Processor Check PE32 VirusTotal Malware Malicious Traffic unpack itself suspicious process suspicious TLD ComputerName DNS crashed 		1 2 2 4.0 4 ZeroCERT

41178 2021-09-25 10:36 Для руководства в работе.doc...  

875f35ac7017ca6c572fdc3e40c0eec5


MSOffice File MachineGuid Check memory RWX flags setting unpack itself Tofsee GameoverP2P Zeus ComputerName Trojan Banking 		2 2 1 5.0 ZeroCERT

41179 2021-09-25 10:31 BERN210819.exe  

5bc6fa2221eed7444ea7d51dea3d1b4e


NSIS Malicious Library PE File PE32 DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder 		2.4 24 ZeroCERT

41180 2021-09-24 17:15 etooltipred.png  

1d7f42754d885cf2b61b683193b02708


Malicious Library PE File PE32 Dridex TrickBot Malware suspicious privilege Malicious Traffic buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 5 2 6.8 M ZeroCERT

41181 2021-09-24 17:14 6789568764240821.exe  

b105bec27851dabe21e1cf1c56bfda0e


PWS .NET framework email stealer BitCoin Generic Malware Admin Tool (Sysinternals etc ...) ScreenShot Steal credential DNS SMTP KeyLogger Code injection AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs AntiVM_Disk IP Check VM Disk Size Check Windows Browser Email ComputerName Cryptographic key 		1 4 1 14.0 M 37 ZeroCERT

41182 2021-09-24 17:14 lv.exe  

e154389e7b2797d043b65d94a6ff9889


NPKI Gen1 Emotet Gen2 Themida Packer Generic Malware Malicious Library Anti_VM UPX Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal cred VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows crashed 		1 7.0 M 25 ZeroCERT

41183 2021-09-24 17:11 i8u7hjdc.exe  

61d5e32562d1c70daf0a3112f7888258


NPKI Generic Malware Malicious Packer UPX Anti_VM Malicious Library Antivirus PE64 PE File VirusTotal Malware powershell suspicious privilege MachineGuid Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process Windows ComputerName Cryptographic key 		8.4 M 37 ZeroCERT

41184 2021-09-24 17:10 eflyairplane.png  

b164522e8070207393f280857dcc06f4


Malicious Library PE File PE32 suspicious privilege buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process ComputerName DNS crashed 		4 6.8 M ZeroCERT

41185 2021-09-24 17:08 nscvhost.exe  

341e63d0f0934ba186bd27a5e43ede35


Generic Malware Malicious Library PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself RCE 		2.0 M 20 ZeroCERT

41186 2021-09-24 17:08 esmallruby.png  

33e5dbee2d872b34c54665cf0404520e


Malicious Library PE File PE32 Dridex TrickBot Malware Report suspicious privilege MachineGuid Malicious Traffic buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 3 3 6.2 M ZeroCERT

41187 2021-09-24 17:07 escrow.exe  

4568267da235d998580cfd9d8b828715


UPX Admin Tool (Sysinternals etc ...) Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName crashed 		3 6 1 10.6 M 33 ZeroCERT

41188 2021-09-24 17:06 eresizebar.png  

544c2478d26f9c59a9d371efe305ebf9


Malicious Library PE File PE32 Dridex TrickBot Malware Report suspicious privilege Malicious Traffic buffers extracted unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		1 5 3 6.6 M ZeroCERT

41189 2021-09-24 16:45 specification-1696062090.xls  

b18faf6bc59505ac36fb11d6ce6131d2


MSOffice File VirusTotal Malware RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 4.2 12 guest

41190 2021-09-24 12:12 specification-1216995372.xls  

1792fb151473098d01ac9989ac7c0040


MSOffice File VirusTotal Malware ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		3 6 4 4.8 9 guest

keyword