popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
43711 2021-01-27 09:52 regasm.exe  

e6ab3de4c697f00a45320e4b7b446d8d


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 16.2 M 21 ZeroCERT

43712 2021-01-27 07:54 http://192.3.141.142/vbc/docum...  

612cbefcc52ad75af7c64823ed1ec1f6


Dridex VirusTotal Malware Code Injection Malicious Traffic exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 1 5 5.6 23 ZeroCERT

43713 2021-01-26 18:32 kingtoupx.scr  

f7578590576f773532d92d481e562ef2


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs ComputerName DNS crashed 		3.2 M 12 ZeroCERT

43714 2021-01-26 18:32 prosperx.scr  

fe3d1c112fa0aa12ab303a11a77b0c6a


VirusTotal Malware Buffer PE Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs DNS crashed 		1 2 1 9.0 M 19 ZeroCERT

43715 2021-01-26 18:28 izux.scr  

2329d201c907626ed3662b062aa32b41


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs ComputerName DNS crashed 		1 3.2 M 13 ZeroCERT

43716 2021-01-26 18:28 globalx.scr  

c44f6eff601aabba3dd3f245cb9dde54


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs ComputerName crashed 		2.6 M 14 ZeroCERT

43717 2021-01-26 18:25 arabicguyx.scr  

0ab82854f449517d76898302950817ee


Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 3 2 1 13.8 M 18 ZeroCERT

43718 2021-01-26 18:24 document_s41021.doc  

90e60c68d3649013b79904c12d272e3b


VirusTotal Malware exploit crash unpack itself malicious URLs Tofsee Windows Exploit DNS DDNS crashed 		1 6 3 4.6 M 25 ZeroCERT

43719 2021-01-26 18:12 ap0s.doc  

628fcb7fe29df6ee64286915015c3496


VirusTotal Malware Malicious Traffic ICMP traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed 		25 26 5 6.4 27 ZeroCERT

43720 2021-01-26 18:10 arabicguyx.exe  

3c68883aec0f8998e92336eb1e4a5dfc


Browser Info Stealer Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AgentTesla powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		1 4 3 1 16.2 M 16 ZeroCERT

43721 2021-01-26 14:49 vbc.exe  

dba3d7f3ca0f9c2d94b4d6830a344c93


VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder malicious URLs sandbox evasion Browser DNS 		5.8 M 37 ZeroCERT

43722 2021-01-26 14:48 rkb86q.zip.exe  

58690c2e2bca2fcb6148a2c68de45d3b


VirusTotal Malware PDB unpack itself crashed 		2.2 M 8 ZeroCERT

43723 2021-01-26 14:41 lkuz11.zip.dll  

bca1b70d9f8a052f4384a9c3c826b9d6


VirusTotal Malware PDB unpack itself crashed 		2.4 M 12 ZeroCERT

43724 2021-01-26 14:34 lkuz11.zip.exe  

bca1b70d9f8a052f4384a9c3c826b9d6


VirusTotal Malware PDB unpack itself DNS crashed 		3.0 M 12 ZeroCERT

43725 2021-01-26 14:33 hesuoig.jpg.exe  

84048d4a704ca3ed43cf15d44dceeb39


VirusTotal Malware 		1.2 M 50 ZeroCERT

keyword