popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45781 2020-10-30 09:57 o.exe  

5cb0213d1dafb33f3ed1255e836572a0


VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 2 7.2 M 26 admin

45782 2020-10-30 09:56 PDF220039000003.msi  

c4214412ef3bbb32f1732e41e9703d83


VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself malicious URLs AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 1 5.0 13 admin

45783 2020-10-30 09:54 faco.exe  

ae975e9d679eeb792b89b7e2d19f9d43


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed 		9.8 M 29 admin

45784 2020-10-30 09:54 lvs7kabg6ouix3r.exe  

d32acba23526d5c591027df645884b39


VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName 		12.4 M 25 admin

45785 2020-10-30 09:51 p.png.exe  

d860b8a46bdf5f113c36ecc32760daf8


VirusTotal Malware AutoRuns Malicious Traffic buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName 		2 4 1 8.4 M 21 guest

45786 2020-10-30 09:49 lvs7kabg6ouix3r.exe  

d32acba23526d5c591027df645884b39


Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW human activity check Windows ComputerName DNS 		1 1 14.0 M 25 guest

45787 2020-10-30 09:30 inf 2020_10_30 E0604.doc  

d4595a5f1f04dfd12460d298347780e5


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		5 11 5 6.0 M guest

45788 2020-10-30 09:14 T5T5PsgV73kgezHAG.exe  

77a8d929966839fa83576eff59446669


VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 3 7.8 M 18 guest

45789 2020-10-30 09:08 EB00575 invoicing.doc  

add2a3411a95dd6e3189600db8b2599c


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee 		5 15 1 4.2 22 guest

45790 2020-10-30 09:04 http://46.183.222.25/lvs7kabg6...  

d32acba23526d5c591027df645884b39


Malware download Nanocore VirusTotal Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW human activity check Windows Exploit ComputerName DNS crashed 		1 3 4 15.4 M guest

45791 2020-10-30 08:25 http://mail.bursaevdenevenakli...  

65219b413cc8678537ffaa48f268491a


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Exploit Advertising ComputerName DNS Cryptographic key crashed 		2 6 3 14.0 M guest

45792 2020-10-30 08:11 http://capellaevents.com/val-i...  

e88a8f48e0299941837f7db0680de66d


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Exploit Advertising ComputerName DNS Cryptographic key crashed keylogger 		2 4 2 12.4 M guest

45793 2020-10-29 18:26 document.doc  

838f19684f9acf6932514d2ce2037b8f


Malware download VirusTotal Malware exploit crash unpack itself malicious URLs Windows Exploit Trojan DNS crashed 		1 3 3 4.8 M 25 guest

45794 2020-10-29 18:18 rep_OUX_100120_UDR_102920.doc  

9cacd26495c3a84a37794522678a5b0f


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		2 11 3 4.4 M guest

45795 2020-10-29 15:54 k.png.exe  

28e9316fb298d2e7a3d9fd71c662b3ec


VirusTotal Malware AutoRuns Malicious Traffic buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName 		2 4 1 8.0 M 32 admin

keyword