popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46081 2020-10-19 11:16 https://docsecure.top/xls/0099...  

fd26ed0c60e78722e574799704209d23


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 2 7.0 M admin

46082 2020-10-19 11:16 https://docsecure.top/111.exe  

ff47e6eb2602178a4306e4fcecb15b7d


Dridex TrickBot ENERGETIC BEAR VirusTotal Malware Report suspicious privilege Code Injection buffers extracted Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Kovter Windows Exploit ComputerName DNS crashed 		2 7 8 8.4 admin

46083 2020-10-19 11:13 OperaSetup.exe  

ff4661ec5bef09ac7fcf479c933d2d81


Malware Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check Tofsee Remote Code Execution DNS 		5 4 1 5.4 guest

46084 2020-10-19 10:55 https://docsecure.top/xls/0051...  

1857ec35df81a3cb7fe02c9382ba3be7


Dridex TrickBot Vulnerability VirusTotal Malware MachineGuid Code Injection Malicious Traffic Checks debugger exploit crash unpack itself Windows utilities Tofsee Kovter Windows Exploit DNS crashed 		3 3 4 7.2 M admin

46085 2020-10-19 10:54 Document13177.xlsb  

136d90dfdc8d28ccfc090f1d09c9bd18


unpack itself 		0.8 guest

46086 2020-10-19 10:53 Document13177.xlsb  

136d90dfdc8d28ccfc090f1d09c9bd18


unpack itself malicious URLs 		1.6 guest

46087 2020-10-19 10:53 Document13177.xlsb  

136d90dfdc8d28ccfc090f1d09c9bd18


Dridex Malware Creates executable files unpack itself malicious URLs Tofsee DNS 		1 1 3 4.6 guest

46088 2020-10-19 10:47 8yPNq.exe  

72f119c6e945eace409d20d7e6973804


Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 5.8 admin

46089 2020-10-19 10:46 pegasun.exe  

e202bc7ccc1682624be91fe0b86d10ce


MachineGuid Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Windows Browser ComputerName Cryptographic key 		5.8 M admin

46090 2020-10-19 10:42 http://google.com  

5c8e481fca1860d15244132ca413e8ea


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Tofsee Windows DNS 		10 5 1 3.6 admin

46091 2020-10-19 10:40 http://google.com  

7c5b5c860e570c3a102b9ad3b70d5250


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Tofsee Windows DNS 		14 6 1 3.6 admin

46092 2020-10-19 10:37 test2.hta  

d8c6560478cca57bb84a2c37228c44bf


Code Injection RWX flags setting unpack itself Windows utilities Windows 		2.2 admin

46093 2020-10-19 10:34 Wkhuldcw8s2x4nsXa.exe  

684ba2ea81a8e9ab031260cbf0dd5db8


VirusTotal Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 6.6 26 admin

46094 2020-10-19 09:29 eh.exe  

4d0f2cb16083c2c99e05cdb59f2d3243


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		8.6 M 27 admin

46095 2020-10-19 09:28 https://docsecure.top/xls/0061...  

92e79228771983699fc0cfe8dfa7f407


Vulnerability VirusTotal Malware MachineGuid Code Injection Checks debugger RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 2 2 7.4 M guest

keyword