popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44506 2020-12-18 16:18 net.exe  

a5965a9592a240bcaaaaafdcfaef13d2


VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself malicious URLs anti-virtualization installed browsers check Windows Browser ComputerName Cryptographic key 		6.2 M 28 ZeroCERT

44507 2020-12-18 16:18 loader.hta  

eb55d80407a08dbfa854c7e6ebc7178a


VirusTotal Malware malicious URLs 		1.8 3 ZeroCERT

44508 2020-12-18 15:40 Jormungandr4.exe  

13b9ee8bc19bde796a4c17a8e082e5a4


VirusTotal Malware Check memory RWX flags setting unpack itself DNS 		3.2 M 47 ZeroCERT

44509 2020-12-18 15:40 jEgLNI40Ro9O775.exe  

7f267b65bf69ce79699d4893158df1ce


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		6 10 9.2 M 16 ZeroCERT

44510 2020-12-18 12:16 CKC.exe  

5fa29b2a0a86144477ff75ad70fe603d


Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Cryptographic key crashed 		8 4 2 10.0 M ZeroCERT

44511 2020-12-18 12:13 Flash_Player_TW_v12.7.6.exe  

68f1a2dc02dd729077427ff09c884eac


VirusTotal Malware unpack itself malicious URLs crashed 		4.6 M 44 ZeroCERT

44512 2020-12-18 11:21 boi.exe  

e339abb742db28e895091e1a4b97a521


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName crashed 		9.8 9 ZeroCERT

44513 2020-12-18 11:10 boi.exe  

e339abb742db28e895091e1a4b97a521


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows Tor ComputerName crashed 		11.0 9 ZeroCERT

44514 2020-12-18 11:09 bear.jpg.exe  

1d9dcacc61aaacca64e3776e9bb06e94


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 2 1 9.8 M 25 ZeroCERT

44515 2020-12-18 09:32 EIC.exe  

8ee16e0b7c3b1121b4a2bc974de12a13


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed keylogger 		2 4 1 14.8 M 8 guest

44516 2020-12-18 09:26 AQW.exe  

3a6ac6822e16f878b966cac3365e12a0


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process malicious URLs Windows ComputerName Cryptographic key crashed keylogger 		2 14.0 M 38 guest

44517 2020-12-18 08:03 http://54.169.136.76/win/docum...  


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 3 6.2 guest

44518 2020-12-17 17:57 http://mute-saga-0240.lovesick...  

7aa5769c35ee7fc6bf69d344890a95f1


Dridex Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 4 4.6 12 r0d

44519 2020-12-17 17:42 631ec884e194a04ac89ae7db34ee2c...  

631ec884e194a04ac89ae7db34ee2cdc


Vulnerability VirusTotal Malware wscript.exe payload download unpack itself malicious URLs 		2 6.8 M 20 r0d

44520 2020-12-17 17:12 regasm.exe  

8ffafa832e6e9a941c2b87a7c75d6d27


VirusTotal Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		1 3 1 14.0 M 55 ZeroCERT

keyword