Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
45256	2020-11-14 23:20	5.exe f139bcd08ad8da406f7dd25411d1c9b3 VirusTotal Malware unpack itself malicious URLs					2.8	M	60	admin

45257	2020-11-14 23:17	vbc.exe 4b2f03238d5a3803519696a8f151d061 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Software		2			13.2	M	24	admin

45258	2020-11-14 19:16	vbc.exe 4b2f03238d5a3803519696a8f151d061 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Software		2			13.2	M	24	guest

45259	2020-11-14 19:12	604100.jpg.exe 8a29f0972b9d24e24ed30c0f3bbdeab4 VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs Ransomware Windows Tor ComputerName Cryptographic key crashed					13.0	M	25	guest

45260	2020-11-14 16:57	mat.exe e06713074df9b1a23469267f1ac54e17 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Check memory Checks debugger unpack itself Windows utilities malicious URLs Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed					10.8	M	25	admin

45261	2020-11-14 16:46	5.exe f139bcd08ad8da406f7dd25411d1c9b3 VirusTotal Malware unpack itself malicious URLs					2.8	M	60	admin

45262	2020-11-14 16:39	5.exe f139bcd08ad8da406f7dd25411d1c9b3 VirusTotal Malware unpack itself malicious URLs					2.8	M	60	admin

45263	2020-11-14 16:34	http://magicview.ga/webxpo/gat... Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed		3	6 Info ET INFO DNS Query for Suspicious .ga Domain ET INFO TLS Handshake Failure ET HUNTING Suspicious GET To gate.php with no Referer ET JA3 Hash - Possible Malware - Unknown traffic associated with Dridex SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) SURICATA HTTP unable to match response to request		4.6	M		admin

45264	2020-11-14 16:29	http://magicview.ga/webxpo/gat... Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed		3	6 Info ET INFO DNS Query for Suspicious .ga Domain SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) ET HUNTING Suspicious GET To gate.php with no Referer ET INFO TLS Handshake Failure ET JA3 Hash - Possible Malware - Unknown traffic associated with Dridex SURICATA HTTP unable to match response to request		4.6	M		admin

45265	2020-11-14 16:24	http://magicview.ga/webxpo/gat... Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed		3	6 Info ET INFO TLS Handshake Failure ET INFO DNS Query for Suspicious .ga Domain ET JA3 Hash - Possible Malware - Unknown traffic associated with Dridex ET HUNTING Suspicious GET To gate.php with no Referer SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) SURICATA HTTP unable to match response to request		4.6	M		admin

45266	2020-11-14 16:20	http://magicview.ga/webxpo/gat... Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed		3	6 Info ET INFO DNS Query for Suspicious .ga Domain ET HUNTING Suspicious GET To gate.php with no Referer SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) ET INFO TLS Handshake Failure ET JA3 Hash - Possible Malware - Unknown traffic associated with Dridex SURICATA HTTP unable to match response to request		4.6	M		admin

45267	2020-11-14 15:58	http://magicview.ga/webxpo/gat... Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed		3	6 Info ET INFO DNS Query for Suspicious .ga Domain ET HUNTING Suspicious GET To gate.php with no Referer ET INFO TLS Handshake Failure ET JA3 Hash - Possible Malware - Unknown traffic associated with Dridex SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) SURICATA HTTP unable to match response to request		4.6	M		admin

45268	2020-11-14 15:54	5.exe f139bcd08ad8da406f7dd25411d1c9b3 VirusTotal Malware unpack itself malicious URLs					2.8	M	60	admin

45269	2020-11-14 15:54	5.exe f139bcd08ad8da406f7dd25411d1c9b3 VirusTotal Malware unpack itself malicious URLs					2.8	M	60	admin

45270	2020-11-14 15:52	5.exe f139bcd08ad8da406f7dd25411d1c9b3 VirusTotal Malware unpack itself malicious URLs					2.8	M	60	admin