popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
45841 2020-10-28 18:14 5j03vVHmJpg.exe  

0dd348f4aa94c0be2e84561dda14eac0


Malware Malicious Traffic Check memory RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 6.0 M admin

45842 2020-10-28 18:06 link.exe  

a9cbc59987ec442437ffea45aade05ba


Dridex VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Tofsee Windows ComputerName Cryptographic key 		1 2 4 9.4 M 40 admin

45843 2020-10-28 12:26 Electronic form.doc  

eb6a6943bf8db6a0c7003c1c869b3323


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee DNS 		3 6 1 6.0 M 14 admin

45844 2020-10-28 12:26 reqrm.exe  

cc219392a073e3c644174607af417b93


Malware download Azorult VirusTotal Malware Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Windows Browser ComputerName Cryptographic key 		1 2 1 14.4 38 admin

45845 2020-10-28 12:18 dat-730044.doc  

86383b38ce26730817e15b0ae7191437


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Windows DNS 		2 3 4 4.4 M admin

45846 2020-10-28 11:38 aPfjegjaF.exe  

6d8eb085d7dfcfdd55f26262e51fbfdc


Browser Info Stealer Emotet Malware download FTP Client Info Stealer Vidar Azorult Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Ransomware Interception Zeus OskiStealer Stealer Windows Browser Email ComputerName Cryptographic key Software crashed Downloader 		16 9 11 27.4 M admin

45847 2020-10-28 11:36 oJHstwpndf.exe  

0eec3e7a4adb97d3262da05499627f11


Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files ICMP traffic unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check human activity check installed browsers check OskiStealer Stealer Windows Browser Tor Email ComputerName DNS 		9 4 6 18.8 M 25 admin

45848 2020-10-28 11:33 99.exe  

e2cd3596bdec815d580dfeadec5209bb


ENERGETIC BEAR VirusTotal Malware suspicious privilege Check memory buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs anti-virtualization Ransomware Windows Tor ComputerName DNS crashed keylogger 		6 6 12.0 M 51 admin

45849 2020-10-28 10:35 https://achremittanceservices....  

d32109224e04cbdb24ca32fb320f89a1


Dridex Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows Tor DNS 		3 4 2.8 admin

45850 2020-10-28 10:34 fem76rrOZaV1Rmecl.exe  

52d43e04889f414a4822214ea6385746


VirusTotal Malware Report Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 3 1 8.2 13 admin

45851 2020-10-28 10:34 DOC_96439691.doc  

56a98d4ac1377142220a9cfc737a13b3


Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		2 6 5 5.4 M admin

45852 2020-10-28 10:30 https://valenciaexpresslaundry...  

09ecf62b70523317e0631ad7d50b669b


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		3 3 4.4 admin

45853 2020-10-28 10:22 Inv_RM55024.exe  

3983beae3cd93351990cb562fd901ae7


Malware download VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check Windows Tor ComputerName DNS Software crashed keylogger 		1 8 8 21.2 M 21 admin

45854 2020-10-28 10:21 crypwarzne.exe  

11462f772298d022d297e311c9c4410d


VirusTotal Email Client Info Stealer Malware Buffer PE AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs Windows Browser Email Cryptographic key 		9.4 22 admin

45855 2020-10-28 10:21 tyuew.exe  

4fc3c6a6fc4711ad9907fdf45810829c


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Windows DNS Cryptographic key crashed 		4 5 1 12.4 17 admin

keyword