Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Score	Zero	VT	Player
44521	2024-05-28 09:39	applovin_exo_ic_chevron_right.... 951d5966a09fd7686a0d7f3eabe66d44 Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

44522	2024-05-28 09:39	applovin_exo_ic_default_album_... 8485ca73fee110095b885a6ea7926030 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

44523	2024-05-28 09:39	crypted.exe 07c57ef6bdc91e2b41f1b2f66a8a7454 Generic Malware Malicious Library UPX PE File PE32 OS Processor Check VirusTotal Malware unpack itself Tor DNS crashed		4	4	2.8	M	61	ZeroCERT

44524	2024-05-28 09:40	applovin_exo_ic_default_album_... 8485ca73fee110095b885a6ea7926030 Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

44525	2024-05-28 09:42	applovin_exo_ic_fullscreen_ent... 49df0545897ea05b5a5747aaf4493df1 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

44526	2024-05-28 09:43	twsyquusdi4TQGWYY527277727Q7QQ... 7b044d66c7fcbc3d3bf6f5d52e96d3b2 MS_RTF_Obfuscation_Objects Anti_VM RTF File doc VirusTotal Malware buffers extracted exploit crash unpack itself Tofsee Exploit Tor DNS crashed	1 Keyword trend analysis	5	5 Info ET INFO Peer to Peer File Sharing Service in DNS Lookup (cf-ipfs .com) ET INFO Peer to Peer File Sharing Service Domain in TLS SNI (cf-ipfs .com) SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 307 ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 278	4.6	M	35	ZeroCERT

44527	2024-05-28 09:43	applovin_exo_ic_forward.xml c8ea0339e58736beb44f97c7b8b4532b Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

44528	2024-05-28 09:44	applovin_exo_ic_fullscreen_exi... 52543fa66fb64983f0e9be33bfc6aac8 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

44529	2024-05-28 09:44	applovin_exo_ic_fullscreen_ent... 49df0545897ea05b5a5747aaf4493df1 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

44530	2024-05-28 09:45	applovin_exo_ic_forward.xml c8ea0339e58736beb44f97c7b8b4532b Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

44531	2024-05-28 09:45	applovin_exo_ic_fullscreen_exi... 52543fa66fb64983f0e9be33bfc6aac8 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

44532	2024-05-28 09:45	applovin_exo_ic_pause_circle_f... b9ef865965343c0f591a4148f2926432 Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

44533	2024-05-28 09:46	room5.hta d3c362ce51282a6583d86fd69a578c89 Generic Malware Antivirus PowerShell powershell suspicious privilege Check memory Checks debugger Creates shortcut RWX flags setting unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key	1 Keyword trend analysis	5	1	8.0	M		ZeroCERT

44534	2024-05-28 09:47	Zinck2.exe 119f67b2ac7eb36c17560948015fbf89 Generic Malware Malicious Library UPX PE File PE32 OS Processor Check unpack itself Remote Code Execution				1.4	M		ZeroCERT

44535	2024-05-28 09:47	applovin_exo_ic_pause_circle_f... b9ef865965343c0f591a4148f2926432 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest