Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
46441	2020-09-20 22:41	3kknRIqyLadKQddiLJu0.exe 8428926592a23a849523726cbb9e351b VirusTotal Malware RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	3			7.2	M	43	admin

46442	2020-09-20 22:16	wMntZv92S.exe 5db3652509403e30eef851f02f0e24ff VirusTotal Malware RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	3			7.0	M	42	admin

46443	2020-09-20 22:14	Putgs3PDYl5q.exe 550a741d0fef7a52e63020c9016ea5c8 Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	3			6.8			admin

46444	2020-09-20 22:14	IqKmozloSxC1qJk.exe b41e414efcad408d911484e5aad13a3b VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	3			7.6		13	admin

46445	2020-09-20 18:53	Putgs3PDYl5q.exe 550a741d0fef7a52e63020c9016ea5c8 Malware PDB Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	3			6.8			admin

46446	2020-09-20 18:49	Mes-228262.doc 276ecb6b0eae11d22873e390b0a4a93d Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS	2 Keyword trend analysis	5	4		6.6	M	28	admin

46447	2020-09-20 18:29	document_01200.doc 2588cb56a4d1f28e05f0dc5d60e7ce2f VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader	1 Keyword trend analysis	1	6 Info ET INFO Executable Download from dotted-quad Host ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile ET CURRENT_EVENTS Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 ET POLICY PE EXE or DLL Windows file download HTTP ET CURRENT_EVENTS Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response		4.4		27	admin

46448	2020-09-20 18:29	FILE_158744266936513.doc 8a7c7754300dab0670eaf86357a5463d Vulnerability VirusTotal Malware Report Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS	5 Keyword trend analysis Info http://kellymorganscience.com/wp-content/SCsWM/ http://61.19.246.238:443/bxNqCIdk/HICIsMd/4PtnFo/zYXRtxzGP8zynC3OwN/gMSBsut3/ http://dandyair.com/font-awesome/rOOAL/ http://134.209.36.254:8080/lIGaoFcQwNKUibZRZy/YxKVgK1u/YbIPVTg/zRv85GXJrvAINoReLI/n6FgRlKdiHoouj8/ https://www.tekadbatam.com/wp-content/AUiw/	12	8 Info SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) ET CNC Feodo Tracker Reported CnC Server group 3 ET POLICY Terse Named Filename EXE Download - Possibly Hostile ET POLICY PE EXE or DLL Windows file download HTTP ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download ET INFO EXE - Served Attached HTTP ET CNC Feodo Tracker Reported CnC Server group 19 ET POLICY HTTP traffic on port 443 (POST)		6.8		27	admin

46449	2020-09-19 10:48	BAL_15920775.doc 6a336c8fcf06f49c600fa32bc3af3b0b Vulnerability Malware Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS	4 Keyword trend analysis	5	4		4.4			admin

46450	2020-09-19 10:47	NAY9VE4B.doc 3660ebad77e4eede41765692b03bb2ad Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee Windows DNS	4 Keyword trend analysis	5	4		4.4		20	admin

46451	2020-09-18 17:53	S4QSx4t9ze4.exe 0c192fbf6cb765ef8ca7d6b08d76ac48 VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	3			7.6		12	admin

46452	2020-09-18 17:43	IqKmozloSxC1qJk.exe b41e414efcad408d911484e5aad13a3b VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	3			7.6		13	guest

46453	2020-09-18 17:24	wMntZv92S.exe 5db3652509403e30eef851f02f0e24ff VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	2			7.2		13	guest

46454	2020-09-18 13:28	oK.exe dfbe801848516484378bc7b073de81e2 VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	2			7.2		10	admin

46455	2020-09-18 13:27	oK.exe dfbe801848516484378bc7b073de81e2 VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key	1 Keyword trend analysis	2			7.2		10	admin