Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
46351	2020-09-24 10:48	030.doc 13aa9d722fb57a0bfa436d26d1b5e2df Vulnerability Malware Malicious Traffic unpack itself malicious URLs Windows DNS	2 Keyword trend analysis	2	3		4.4			admin

46352	2020-09-24 10:37	okcc.exe 0819da23096e8eec46edee1749a95f2b VirusTotal Malware Code Injection buffers extracted unpack itself crashed					5.6		45	admin

46353	2020-09-24 10:36	nnab.exe 4c259a2d95207832b822e99db15d0bdd VirusTotal Malware Code Injection buffers extracted unpack itself sandbox evasion crashed					6.0		49	admin

46354	2020-09-24 10:31	96XjFgGTW3Gj7opXyc.exe 19f95400404f397e434328ec054a4fbb Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	1			6.4			admin

46355	2020-09-24 10:29	SCAN.exe fadf68763da300c57f81f7b7bc1f193e Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed					7.0		51	admin

46356	2020-09-24 10:16	lagguyx.exe 250628e97d9c883b77ff9ef0b1b7c571 VirusTotal Malware Code Injection buffers extracted unpack itself malicious URLs sandbox evasion crashed					6.4		57	guest

46357	2020-09-24 10:14	document_v_200.doc 88203e59a10a8fc1db4d317a48542833 VirusTotal Malware exploit crash unpack itself malicious URLs Windows Exploit DNS crashed Downloader	1 Keyword trend analysis	1	5 Info ET INFO DYNAMIC_DNS Query to *.duckdns. Domain ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile ET CURRENT_EVENTS Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 ET POLICY PE EXE or DLL Windows file download HTTP ET CURRENT_EVENTS Likely Evil EXE download from dotted Quad by MSXMLHTTP M2		4.8	M	21	admin

46358	2020-09-24 10:13	SCAN.exe fadf68763da300c57f81f7b7bc1f193e Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed					7.0		51	guest

46359	2020-09-24 10:12	914WYW Q41046.doc 5ca7b59650dc12663141a117dbfd01c2 Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Windows DNS	2 Keyword trend analysis	2	3		5.0		18	admin

46360	2020-09-24 09:57	Iid.exe bb9700cdcbb715fd22b113c4be78890b VirusTotal Malware Report Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Browser Advertising ComputerName DNS Cryptographic key	2 Keyword trend analysis	6	7 Info ET CNC Feodo Tracker Reported CnC Server group 2 ET CNC Feodo Tracker Reported CnC Server group 1 ET CNC Feodo Tracker Reported CnC Server group 4 ET CNC Feodo Tracker Reported CnC Server group 19 ET HUNTING GENERIC SUSPICIOUS POST to Dotted Quad with Fake Browser 1 ET CNC Feodo Tracker Reported CnC Server group 22 ET POLICY HTTP traffic on port 443 (POST)		7.4		56	guest

46361	2020-09-24 09:53	8888888.png.exe c3d13518fee1a4a9755f4610dad0155d AutoRuns Code Injection Check memory buffers extracted unpack itself Windows utilities Detects VMWare suspicious process malicious URLs sandbox evasion WriteConsoleW VMware Windows Browser ComputerName crashed					8.4			admin

46362	2020-09-24 09:52	vbc.exe e42420ac8c28ac33b082031ca1e06c68 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName					7.8	M	20	admin

46363	2020-09-24 09:50	UpdyyWH55.exe 53af5a617b288d7de28912fb8825a0dc VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	1			6.4		10	admin

46364	2020-09-24 09:29	svchost.exe ecd385134aad9c9e80c2bce77c9c25f6 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed keylogger					13.0		21	guest

46365	2020-09-24 09:28	vbc.exe e42420ac8c28ac33b082031ca1e06c68 VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName					7.4		20	guest