popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44386 2020-12-24 10:31 ascvjkfd.exe  

115d4ac308403ea6cffaf5d7ff23a501


Browser Info Stealer Emotet Malware download FTP Client Info Stealer Vidar Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Ransomware Interception Zeus OskiStealer Stealer Windows Browser Email ComputerName DNS Cryptographic key Software Downloader 		12 10 9 29.2 M 25 ZeroCERT

44387 2020-12-24 10:27 aguerox.scr  

90b585b2f2737b2c4492708b54c9359d


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed keylogger 		2 4 1 14.6 M 23 ZeroCERT

44388 2020-12-24 10:24 ac.exe  

d48449979ab0c5751e432b6743268ccd


VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName 		2 12.4 M 34 ZeroCERT

44389 2020-12-24 10:23 55555555555.jpg.exe  

c7f979b367bf63800dda59db4898321b


DNS 		1.2 ZeroCERT

44390 2020-12-24 09:47 https://popcash.net/world/go/2...  

20a9e246228be4bbb6c098ff278257f3


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		3 8 3 4.6 M ZeroCERT

44391 2020-12-24 09:21 https://ucf7440f11e64fe794a0c8...  

dafe01ff19d72fb69ae0592c98440748


Dridex Malware Code Injection exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 3 4.2 M 28 ZeroCERT

44392 2020-12-24 09:16 winlog.exe  

c61f9f9c9e4cda47016cfd944778af19


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 8 1 12.8 M 38 ZeroCERT

44393 2020-12-24 09:03 win32.exe  

2f0c8a1bb15284bdbbbe38c24a2aa491


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 10 1 14.0 M 40 ZeroCERT

44394 2020-12-24 09:03 svchost.exe  

08ef8917e644417f578ed3be5033a77e


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 10 1 13.2 M 34 ZeroCERT

44395 2020-12-23 18:34 R5VVFQEN7P2YCUP.doc  

cab5254b1b78ca7a2c96c4f9d4ba3b40


Vulnerability VirusTotal Malware unpack itself DNS 		3.0 M 14 ZeroCERT

44396 2020-12-23 18:33 regasm.exe  

1d9086709ae0ee4dd4055b9fef5fca4c


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Trojan DNS Software 		1 2 10 1 12.6 M 20 ZeroCERT

44397 2020-12-23 18:30 R5VVFQEN7P2YCUP.doc  

cab5254b1b78ca7a2c96c4f9d4ba3b40


Vulnerability VirusTotal Malware unpack itself malicious URLs 		3.2 M 14 ZeroCERT

44398 2020-12-23 18:27 bine.exe  

643d71110f8f60590bd795e97317bd86


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		17 15 4 10.2 M 28 ZeroCERT

44399 2020-12-23 18:27 io5O6T4F0h7ZH76.dll  

5981b313d6b1882ed0161e200d12232e


VirusTotal Malware Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 1 6.6 M 14 ZeroCERT

44400 2020-12-23 18:24 1ABG7OS11fImC.dll  

858bad49be45f10f8110a16e4f327f46


VirusTotal Malware Malicious Traffic Checks debugger RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 1 6.2 M 15 ZeroCERT

keyword