Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43546 2021-02-02 13:40 scr.dll  

8a7fa2352851fddec50f91833637dc69


VirusTotal Malware Malicious Traffic Checks debugger buffers extracted unpack itself DNS
1 1 4.4 M 35 ZeroCERT

43547 2021-02-02 13:39 self.exe  

27493edfa85af8660f2c05f5eddf2969


Malware download Azorult Dridex TrickBot VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Kovter Browser ComputerName DNS
1 1 6 1 11.0 M 50 ZeroCERT

43548 2021-02-02 13:37 pzf3d4h.zip.exe  

d91d846f2cd5f791cfae21bec49fb3d5


VirusTotal Malware PDB unpack itself DNS crashed
3.0 M 10 ZeroCERT

43549 2021-02-02 13:36 rbv9d79.zip.exe  

ebca4076e0a420caf420bdcd98c91d3c


VirusTotal Malware PDB unpack itself malicious URLs
2.6 M 11 ZeroCERT

43550 2021-02-02 13:24 Protected Client.vbs  

b8e153cc0bec4b58809b9d323cc55303


VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI ICMP traffic unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows Java ComputerName DNS Cryptographic key DDNS keylogger
6 2 15.8 M 6 ZeroCERT

43551 2021-02-02 13:23 private.png.exe  

f7fc343cbf86f08c7b529ab451677752


VirusTotal Malware Buffer PE Check memory buffers extracted Creates executable files unpack itself AppData folder malicious URLs DNS crashed
5.4 M 19 ZeroCERT

43552 2021-02-02 12:13 pp.exe  

7b8047fdbb913497713a07aeed0d0f4c


VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS
1 10.2 M 47 ZeroCERT

43553 2021-02-02 11:42 pebro.exe  

ac4cd44715d6bcee3624efeaf5b7b107


Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Browser Email ComputerName DNS Software
1 1 3 15.0 M 19 ZeroCERT

43554 2021-02-02 11:37 pe.exe  

40b3185fce9e7d377a4835d5c0420502


VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS
1 11.6 M 47 ZeroCERT

43555 2021-02-02 11:33 ndu.exe  

57f69ad1d8f4ca03de19053597368a8d


Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Browser Email ComputerName DNS Software
1 1 3 15.2 M 20 ZeroCERT

43556 2021-02-02 11:29 kali.jpg.exe  

185dd5ec503c683da355a50e70f25c68


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed
2 3 5.2 ZeroCERT

43557 2021-02-02 11:24 hkcmd.exe  

d7c6ddd2feb3c305103f5c3cbb81ba01


VirusTotal Malware suspicious privilege Malicious Traffic unpack itself Windows utilities suspicious process AppData folder Tofsee Windows DNS
14 27 1 8 6.8 M 56 ZeroCERT

43558 2021-02-02 11:14 guy.exe  

e492cdbd78ea81ea8e634524441a22a4


VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS
1 9.8 M 43 ZeroCERT

43559 2021-02-02 11:08 guy.exe  

e492cdbd78ea81ea8e634524441a22a4


VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS
1 11.2 M 43 ZeroCERT

43560 2021-02-02 11:06 cobaltstrike_shellcode.exe  

93a1ae6fb7152ff6e8fa76f88e14658d


Dridex TrickBot VirusTotal Malware Malicious Traffic unpack itself malicious URLs Kovter ComputerName DNS
1 1 1 5.2 60 r0d