popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43591 2021-02-01 22:48 OBAAA.exe  

bac9014a9ed1a27a92d6f13e3de236c1


Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 16.4 M 27 ZeroCERT

43592 2021-02-01 22:48 pablox.scr  

8097dd099b5b30cc949253b22c59aeb9


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		2 3 7 1 13.0 M 3 ZeroCERT

43593 2021-02-01 22:37 new.exe  

fd11932ba1ac909889ecb291e5555d25


VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs human activity check Windows ComputerName DNS DDNS 		3 1 11.2 M 22 guest

43594 2021-02-01 22:36 kingtroupz.scr  

93c18a3630eb1cb922a3761c45ae6dc2


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 1 1 14.4 M 15 guest

43595 2021-02-01 22:25 IMG_1660392.pdf.exe  

e7064208a3674a61a91b3dd886a1a503


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.6 M 18 guest

43596 2021-02-01 22:25 is.exe  

34effb36eea9746901723c2690bec3c7


VirusTotal Malware powershell AutoRuns suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 7.8 M 24 guest

43597 2021-02-01 22:11 document.doc  

9e1772002f8791df8ccc8534c234e971


VirusTotal Malware Malicious Traffic ICMP traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed 		14 13 5 4 6.4 M 25 guest

43598 2021-02-01 22:11 hkcmd.exe  

b8fbbf48619bf863aba9e5eb8fb3f81e


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs 		11 13 6 9.0 M 17 guest

43599 2021-02-01 16:46 document.doc  

ae9cd0d00d776cbef69043a7d2f025c3


Dridex VirusTotal Malware exploit crash unpack itself malicious URLs Tofsee Exploit crashed 		2 3 3.6 15 guest

43600 2021-02-01 12:35 vbc.exe  

7aecb24d8babdcdf05a5848e7029e94f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs WriteConsoleW Windows Cryptographic key 		5 9 9.0 M 11 ZeroCERT

43601 2021-02-01 12:28 pppp.exe  

b88c6ae98565520b5abf0dbc67522f1d


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 5 1 14.8 M 48 ZeroCERT

43602 2021-02-01 12:28 sppp.exe  

b12bb3159a945df7c5944b6f4192516d


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Cryptographic key 		1 2 1 10.6 M 39 ZeroCERT

43603 2021-02-01 12:26 OBBBOP.exe  

06f4d22f42e1d2406d5dd25c69aa92ac


Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 3 1 17.4 M 41 ZeroCERT

43604 2021-02-01 12:22 obbbb.exe  

52f0b3acdd40bc050d4c0cdac026cf73


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		4 5 1 15.0 M 27 ZeroCERT

43605 2021-02-01 12:21 sil.exe  

8ecb4e5a7e2da81cfc68069c61d873a0


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName 		10.6 M 40 ZeroCERT

keyword