popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44086 2021-01-06 12:44 BavwKzfNo6hxk.dll  

9d7b87ffd95d99fd6116b9903905ed5d


VirusTotal Malware PDB 		1.4 M 24 조광섭

44087 2021-01-06 12:38 BavwKzfNo6hxk.dll  

9d7b87ffd95d99fd6116b9903905ed5d


VirusTotal Malware PDB 		1.4 M 24 조광섭

44088 2021-01-06 12:33 BavwKzfNo6hxk.dll  

9d7b87ffd95d99fd6116b9903905ed5d


VirusTotal Malware PDB 		1.4 M 24 guest

44089 2021-01-06 12:29 BavwKzfNo6hxk.dll  

9d7b87ffd95d99fd6116b9903905ed5d


VirusTotal Malware PDB 		1.4 M 24 guest

44090 2021-01-06 12:26 BavwKzfNo6hxk.dll  

9d7b87ffd95d99fd6116b9903905ed5d


VirusTotal Malware PDB 		1.4 M 24 guest

44091 2021-01-06 12:10 5DVxvgK9jn5gaBl.exe  

cec5782c931581f13ce3c5d5b6a948a2


Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName DNS 		1 4 1 11.4 M ZeroCERT

44092 2021-01-06 12:09 QPR-3067.exe  

1d11abb9dac9b15823d1bcad2b8b3675


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 7 16.8 M 27 guest

44093 2021-01-06 11:04 5DVxvgK9jn5gaBl.exe  

cec5782c931581f13ce3c5d5b6a948a2


Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName DNS 		1 4 1 10.8 ZeroCERT

44094 2021-01-06 11:04 QPR-3067.exe  

1d11abb9dac9b15823d1bcad2b8b3675


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs Windows Cryptographic key 		12.2 M 27 ZeroCERT

44095 2021-01-06 10:59 oscvkjfdg.exe  

309d6364fda12fa061274bb9e9ea02c9


Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check OskiStealer Stealer Windows Browser Email ComputerName 		9 2 3 18.2 M 44 ZeroCERT

44096 2021-01-06 10:58 nmode.exe  

4abfa113c1177d7123f6e7974cb55824


unpack itself DNS 		2.4 M ZeroCERT

44097 2021-01-06 10:43 M21Y.dll  

e8321185b16458d8b3c0bbbbcf1f4c83


VirusTotal Malware PDB Malicious Traffic Checks debugger RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		2 7.8 M 36 r0d

44098 2021-01-06 10:35 CSEWRP2SOE.doc  

ad4bcb076364ee442f3f39da778bd020


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		1 5 5 1 5.4 M 32 ZeroCERT

44099 2021-01-06 10:35 ATBL039LN.doc  

ad4bcb076364ee442f3f39da778bd020


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		1 5 5 1 5.4 M 32 ZeroCERT

44100 2021-01-06 10:31 __38810326881.doc  

a57197f6d468f2143536940bb13541a6


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		1 9 5 5.0 M 19 r0d

keyword