popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45571 2020-11-09 09:25 http://148.163.12.101/WMndFrdk...  

d41d8cd98f00b204e9800998ecf8427e


Dridex Malware MachineGuid Code Injection Malicious Traffic buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Detects VMWare malicious URLs VMware anti-virtualization Tofsee Windows Exploit ComputerName Remote Code Execution DNS crashed 		32 9 7 11.0 guest

45572 2020-11-08 23:02 Runtime.exe  

ff5f3f329d995edc248fd3a5ee17ed37


VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AppData folder malicious URLs 		4.4 M 53 guest

45573 2020-11-08 22:16 Runtime.exe  

ff5f3f329d995edc248fd3a5ee17ed37


VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself AppData folder malicious URLs 		4.4 M 53 guest

45574 2020-11-08 22:11 Scan copy.exe  

2e3783f9a6d09de8e60564c7a8c9370a


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Software 		2 14.4 M 47 guest

45575 2020-11-08 22:10 svchost.jpg.exe  

5c21ea2caa5fa83d2f91a97da6702cee


VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger unpack itself Windows utilities suspicious process malicious URLs Windows ComputerName 		4.8 M 57 guest

45576 2020-11-08 22:09 VSP2091.exe  

7abcfd428e72ce9cc2bdeef462e31523


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key 		1 11.6 M 44 guest

45577 2020-11-08 22:07 scan00002346_Doc.exe  

94e005d8a11e1bcc17b6fdae777e5b62


VirusTotal Malware Check memory unpack itself crashed 		2.8 M 56 guest

45578 2020-11-06 14:18 reservation.exe  

59d5f66f4cd5889b1e825239097a5974


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs Tofsee Ransomware Windows Tor ComputerName Cryptographic key crashed 		1 2 1 14.0 M 53 guest

45579 2020-11-06 13:25 7123853.xlsb  

ff10e6466f4031b5d873be6efea559b6


VirusTotal Malware Check memory Checks debugger Creates shortcut Creates executable files unpack itself malicious URLs WriteConsoleW ComputerName crashed 		4.8 M 5 admin

45580 2020-11-06 13:20 https://sunspalato.com/wp-cont...  

289d3afec6ddf67f84277c0bacac2d1f


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		4 3 4.8 admin

45581 2020-11-06 11:26 document3.doc  

d5c72a79881e7245bcb3fe135d4143f5


LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit Trojan DNS crashed 		2 4 13 5.8 M 36 admin

45582 2020-11-06 11:10 tyx.exe  

32e7a6c613f21394c0f89b8b948e4f01


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed 		13.0 M 36 admin

45583 2020-11-06 11:06 reservation.exe  

59d5f66f4cd5889b1e825239097a5974


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs Tofsee Ransomware Windows Tor ComputerName DNS Cryptographic key crashed 		1 3 1 14.6 M 53 admin

45584 2020-11-06 11:03 http://ps.popcash.net/go/27536...  

a954a876386a7bb1541498370036cb31


Dridex VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 9 3 5.6 M admin

45585 2020-11-06 10:52 document3.doc  

d5c72a79881e7245bcb3fe135d4143f5


LokiBot Malware download Vulnerability VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit Trojan DNS crashed 		2 3 13 5.8 M 36 admin

keyword