popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
4141 2020-12-31 16:43 TX2UBEUC.doc  

2154178028c6e1626fc45b2c83962491


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		1 3 3 1 5.4 M 31 ZeroCERT

4142 2020-12-31 16:45 ZY8GA4.doc  

2154178028c6e1626fc45b2c83962491


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		1 3 3 1 5.4 M 31 ZeroCERT

4143 2021-01-03 14:08 102w.png.exe  

331d3b10b6a34a95ec04b847b948d5b7


VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee Windows Cryptographic key 		2 2 1 3.6 M 45 ZeroCERT

4144 2021-01-03 14:08 55555555555.jpg.exe  

2841c67f91561d42cdd8aca3b1150731


DNS 		1.2 ZeroCERT

4145 2021-01-03 14:16 cred.dll  

526e74e4e696af9cfd742bbd8d05889e


FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Checks debugger unpack itself Email DNS Software 		4 6.2 M 53 ZeroCERT

4146 2021-01-03 14:16 A2POF9K.doc  

822dec5f5d51a065b4ff2a0b46eaecf0


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		2 14 3 6.2 M 41 ZeroCERT

4147 2021-01-03 14:29 uglNVuKJ8fDyYcpC8TZSUi.dll  

edcd762c12b22607a61e4c97e686f2d0


VirusTotal Malware PDB Malicious Traffic Checks debugger ICMP traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		3 9.2 M 44 ZeroCERT

4148 2021-01-03 14:30 TC1WI34YWX4.doc  

40f79fcaa6e497435e1ac54f87fe90ab


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		4 3 6.4 M 39 ZeroCERT

4149 2021-01-03 14:38 ZG8Y0NI8.doc  

a92e2090f008413439f1936f59b92b6b


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		4 3 6.4 M 32 ZeroCERT

4150 2021-01-03 14:40 aghkdfgh.exe  

170faeb45ecbd3499349403e53573a5f


Browser Info Stealer Emotet Malware download FTP Client Info Stealer Vidar Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Ransomware Interception Zeus OskiStealer Stealer Windows Browser Email ComputerName Cryptographic key Software crashed Downloader 		11 10 10 28.4 M 21 ZeroCERT

4151 2021-01-04 15:50 130322_FS_Setup.exe  

0127495b7b6ec2eeb59684745fbcdf16


VirusTotal Malware Check memory unpack itself crashed 		2.0 11 r0d

4152 2021-01-04 19:15 BXC6N26G9.doc  

40f79fcaa6e497435e1ac54f87fe90ab


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		4 3 6.6 M 41 ZeroCERT

4153 2021-01-04 19:15 angelx.scr  

980bd29a88ceb4a3e0f07d789768bcbf


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		13.8 M 48 ZeroCERT

4154 2021-01-04 19:25 angelx.scr  

980bd29a88ceb4a3e0f07d789768bcbf


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		12.0 M 48 ZeroCERT

4155 2021-01-04 19:26 client_connector.exe  

5d1df2995bd1b54b98368d2287d34713


VirusTotal Malware AutoRuns PDB Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces suspicious process AppData folder malicious URLs IP Check Tofsee Windows DNS 		2 5 1 7.6 M 24 ZeroCERT

keyword