popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
44701 2020-12-08 10:02 EGO.exe  

f084742f15cd553f5628cfd035c5ca7c


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName crashed 		9.8 M 36 ZeroCERT

44702 2020-12-08 09:45 euremen.exe  

b076d449c2fa8d8f1d8b8b07254df976


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Collect installed applications Check virtual network interfaces malicious URLs suspicious TLD IP Check installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		4 11 2 15.6 32 ZeroCERT

44703 2020-12-08 09:45 EGO.exe  

f084742f15cd553f5628cfd035c5ca7c


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName Cryptographic key Software crashed 		2 4 1 13.4 M 36 ZeroCERT

44704 2020-12-08 09:34 btc.exe  

31d61cabf5e6f744076483baf9ac109c


VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Tofsee ComputerName 		1 2 1 4.2 47 ZeroCERT

44705 2020-12-08 09:34 CleanAV.exe  

9d2c4275faf224f74ff5dd4c7c22aab3


VirusTotal Malware MachineGuid Malicious Traffic Checks debugger malicious URLs Tofsee Advertising Google 		1 2 1 3.6 56 ZeroCERT

44706 2020-12-08 08:01 http://shgshgsndynationalobjin...  

9971aba6d9eca7e79d711b0b59e1edef


Dridex VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed Downloader 		1 2 5 5.0 ZeroCERT

44707 2020-12-07 18:33 FLActivator v.3.6.exe  

439fe5699fa97546a36332a9480904ad


Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs IP Check installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key crashed 		3 10 1 15.8 51 ZeroCERT

44708 2020-12-07 18:27 Ableton Activator v.3.1.exe  

26eae8f979649f0e1cb7de1c01562697


Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs IP Check installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key crashed 		3 9 1 16.4 19 ZeroCERT

44709 2020-12-07 17:43 GIG.exe  

f3a6f885c0c3e7853e44dd9e013897ff


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows Tor ComputerName DNS Cryptographic key crashed 		12.2 M 53 ZeroCERT

44710 2020-12-07 17:41 1_4_3.xls  

890522e2846bc9ae0ee808db164ccdb5


Dridex VirusTotal Malware Creates executable files unpack itself malicious URLs Tofsee 		2 3 4.0 M 25 guest

44711 2020-12-07 14:20 xpertwar.exe  

85063571eccad2a81103ea6603ba1e08


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory buffers extracted WMI Creates executable files unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Interception Windows Browser Email ComputerName DNS crashed 		4 5 12.4 M 50 r0d

44712 2020-12-07 14:07 xpertwar.exe  

85063571eccad2a81103ea6603ba1e08


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory buffers extracted WMI Creates executable files unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Interception Windows Browser Email ComputerName DNS crashed 		4 5 12.4 M 50 r0d

44713 2020-12-07 13:38 xpertwar.exe  

85063571eccad2a81103ea6603ba1e08


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory buffers extracted WMI Creates executable files unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Interception Windows Browser Email ComputerName DNS crashed 		4 5 12.4 M 47 guest

44714 2020-12-07 11:45 conhost.exe  

a9e34ef1f1dd7f773bc6941d9b9e3ad9


VirusTotal Malware AutoRuns Code Injection Check memory Creates executable files Windows utilities malicious URLs WriteConsoleW Windows keylogger 		2 8.6 M 58 r0d

44715 2020-12-07 11:24 xzx.exe  

aed69bded2c5920724549a7112b9fecb


VirusTotal Malware Check memory Checks debugger unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		5.6 M 43 ZeroCERT

keyword