popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43576 2021-02-01 23:45 1b31bced0a564bed9f60264f061dcd...  

7fb109c410846c73a5d67a5b9b665491


Check memory Checks debugger Creates executable files unpack itself malicious URLs sandbox evasion Remote Code Execution DNS 		5.6 M ZeroCERT

43577 2021-02-01 23:45 6c99c19d6da741af943a35016bb05b...  

11b4d2182aeaeb0462319bec4e5f09c2


VirusTotal Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself Windows utilities malicious URLs Windows Advertising Remote Code Execution 		5.2 M 35 ZeroCERT

43578 2021-02-01 23:41 winlog4.exe  

cdcc17e1b5807fe352b847ba8efc3c1a


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		8.6 M 21 ZeroCERT

43579 2021-02-01 23:39 winlog4.exe  

cdcc17e1b5807fe352b847ba8efc3c1a


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs DNS 		8 12 11.2 M 21 ZeroCERT

43580 2021-02-01 23:36 yarox.scr  

13ae0f94a8dbf3b2e3c18d63807a081b


VirusTotal Malware 		0.4 M 5 ZeroCERT

43581 2021-02-01 23:31 winlog2.exe  

e0a35464c8997bf189d9de32563fa11b


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs 		10 13 9.2 M 7 ZeroCERT

43582 2021-02-01 23:31 winlog3.exe  

839479471405527c2783b6ad79c1bc40


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		2 6 9.0 M 21 ZeroCERT

43583 2021-02-01 23:24 vbc2.exe  

e0a35464c8997bf189d9de32563fa11b


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process AppData folder malicious URLs Windows 		6 11 12.0 M 7 ZeroCERT

43584 2021-02-01 23:23 winlog.exe  

f81ddb2074613d44e6ec49e156fef866


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		1 3 9.6 M 9 ZeroCERT

43585 2021-02-01 23:19 vbc.exe  

5ca35c6d01a8ebcce0c2444ea6a7a55b


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		2 4 8.8 M 16 ZeroCERT

43586 2021-02-01 23:18 ugopx.scr  

963e6283c7d4698f10614845807f8f0b


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces DNS 		1 1 1 3.6 M 19 ZeroCERT

43587 2021-02-01 23:14 svchost2.exe  

abaf4a16881e4133a46eb7db1ad760c9


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 13.6 M 25 ZeroCERT

43588 2021-02-01 23:13 svchost.exe  

2c463f7c03f8264a1b9ad8e9bc8721a7


VirusTotal Malware Check memory RWX flags setting unpack itself 		1.6 M 15 ZeroCERT

43589 2021-02-01 23:01 regasm.exe  

2c57c1290f030436fb3addefe840fe5a


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		2 7 13.6 M 24 ZeroCERT

43590 2021-02-01 23:00 Protected Client.vbs  

816473174f6851458936b335d48f4d85


Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut Creates executable files ICMP traffic unpack itself Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check installed browsers check Windows Java Browser Email ComputerName DNS Cryptographic key DDNS keylogger 		6 2 21.0 M 7 ZeroCERT

keyword